From 8fda43638d0323339ff53c9a7c4086c0de75f4f8 Mon Sep 17 00:00:00 2001 From: Vickey Brown Date: Mon, 24 Aug 2026 14:20:07 -0500 Subject: [PATCH] Migrate from clair-scan to roxctl-scan Replace clair-scan task with roxctl-scan to provide better security coverage as per Konflux Integration Service Team migration plan. Changes: - Updated task name from clair-scan to roxctl-scan - Updated bundle reference to task-roxctl-scan:0.1 Co-Authored-By: Claude Sonnet 4.5 # Conflicts: # .tekton/fact-component-pipeline.yaml # Conflicts: # .tekton/fact-component-pipeline.yaml --- .tekton/fact-component-pipeline.yaml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/.tekton/fact-component-pipeline.yaml b/.tekton/fact-component-pipeline.yaml index ed177b0c..9a8ffd2d 100644 --- a/.tekton/fact-component-pipeline.yaml +++ b/.tekton/fact-component-pipeline.yaml @@ -395,6 +395,25 @@ spec: - input: $(params.skip-checks) operator: in values: ["false"] + - name: clair-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + taskRef: + params: + - name: name + value: clair-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.4@sha256:219964897ac4d5a9473ec297a1b39ae078a34b76b45d04c4672bd569cc295c29 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: ["false"] - name: ecosystem-cert-preflight-checks params: - name: image-url