Build pipeline tasks

These tasks, defined in the build-definitions repo are tasks provided by and supported as a part of the Konflux platform. You can use references to these tasks when customizing your build pipeline.

acs-deploy-check (0.1)

Policy check a deployment with StackRox/RHACS This tasks allows you to check a deployment against build-time policies and apply enforcement to fail builds. It’s a companion to the stackrox-image-scan task, which returns full vulnerability scan results for an image. See also:

acs-image-check (0.1)

Policy check an image with StackRox/RHACS This tasks allows you to check an image against build-time policies and apply enforcement to fail builds. It’s a companion to the stackrox-image-scan task, which returns full vulnerability scan results for an image. See also:

acs-image-scan (0.1)

Policy check an image with StackRox/RHACS This tasks allows you to check an image against build-time policies and apply enforcement to fail builds. It’s a companion to the stackrox-image-scan task, which returns full vulnerability scan results for an image. See also:

apply-tags (0.1)

Applies additional tags to the built image. See also: README.md

buildah (0.1)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also: README.md

buildah (0.2)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also: README.md MIGRATION.md

buildah-oci-ta (0.1)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also: README.md

buildah-oci-ta (0.2)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also: README.md MIGRATION.md

buildah-remote (0.1)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also: README.md

buildah-remote (0.2)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also: README.md MIGRATION.md

buildah-remote-oci-ta (0.1)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also:

buildah-remote-oci-ta (0.2)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also: README.md MIGRATION.md

buildah-rhtap (0.1)

Buildah task builds source code into a container image and pushes the image into container registry using buildah tool. See also:

build-image-index (0.1)

This takes existing Image Manifests and combines them in an Image Index. See also: README.md

build-vm-image (0.1)

Build disk images using bootc-image-builder. https://github.com/osbuild/bootc-image-builder/ See also:

clair-scan (0.1)

Scans container images for vulnerabilities using Clair, by comparing the components of container image against Clair’s vulnerability databases. See also: README.md

clamav-scan (0.1)

Scans the content of container images for viruses, malware, and other malicious content using ClamAV antivirus scanner. See also: README.md

deprecated-image-check (0.3)

Identifies the unmaintained and potentially insecure deprecated base images. Pyxis API collects metadata from image repository, and Conftest applies supplied policy to identify the deprecated images using that metadata. See also: README.md MIGRATION.md

deprecated-image-check (0.4)

Identifies the unmaintained and potentially insecure deprecated base images. Pyxis API collects metadata from image repository, and Conftest applies supplied policy to identify the deprecated images using that metadata. See also: README.md MIGRATION.md

download-sbom-from-url-in-attestation (0.1)

Get the SBOM for an image by downloading the OCI blob referenced in the image attestation. See also: README.md

eaas-provision-space (0.1)

Provisions an ephemeral namespace on an EaaS cluster using a SpaceRequest. This namespace can then be used to provision other ephemeral environments for testing. See also: README.md

ecosystem-cert-preflight-checks (0.1)

Scans container images for certification readiness See also: README.md

fbc-related-image-check (0.1)

Checks the validity of all the images referenced in the file-based catalog (FBC) to inspect manifest content using Skopeo. See also: README.md

fbc-validation (0.1)

Ensures file-based catalog (FBC) components are uniquely linted for proper construction as part of build pipeline. See also: README.md USAGE.md TROUBLESHOOTING.md

gather-deploy-images (0.1)

Extract images from deployment YAML to pass to EC for validation See also: README.md

generate-odcs-compose (0.1)

See also: README.md

generate-odcs-compose (0.2)

See also: README.md MIGRATION.md

git-clone (0.1)

The git-clone Task will clone a repo from the provided url into the output Workspace. By default the repo will be cloned into the root of your Workspace. See also: README.md

git-clone-oci-ta (0.1)

The git-clone-oci-ta Task will clone a repo from the provided url and store it as a trusted artifact in the provided OCI repository. See also: README.md

init (0.1)

Initialize Pipeline Task, include flags for rebuild and auth. Generates image repository secret used by the PipelineRun. See also: README.md

init (0.2)

Initialize Pipeline Task, include flags for rebuild and auth. Generates image repository secret used by the PipelineRun. See also: README.md MIGRATION.md

inspect-image (0.1)

Inspects and analyzes manifest data of the container’s source image, and its base image (if available) using Skopeo. An image’s manifest data contains information about the layers that make up the image, the platforms for which the image is intended, and other metadata about the image. See also: README.md

oci-copy (0.1)

Given a file in the user’s source directory, copy content from arbitrary urls into the OCI registry. See also: README.md

oci-copy-oci-ta (0.1)

Given a file in the user’s source directory, copy content from arbitrary urls into the OCI registry. See also: README.md

operator-sdk-generate-bundle (0.1)

Generate an OLM bundle using the operator-sdk See also: README.md

opm-get-bundle-version (0.1)

Fetch the current version of the provided OLM bundle image See also: README.md

opm-render-bundles (0.1)

Create a catalog index and render the provided bundles into it See also: README.md

prefetch-dependencies (0.1)

Task that uses Cachi2 to prefetch build dependencies. See also: README.md

prefetch-dependencies-oci-ta (0.1)

Task that uses Cachi2 to prefetch build dependencies. The fetched dependencies and the See also: README.md

provision-env-with-ephemeral-namespace (0.1)

See also: README.md

push-dockerfile (0.1)

Discover Dockerfile from source code and push it to registry as an OCI artifact. See also: README.md

push-dockerfile-oci-ta (0.1)

Discover Dockerfile from source code and push it to registry as an OCI artifact. See also: README.md

reduce-snapshot-to-single-component (0.1)

Reduce a snapshot to contain the single component that the snapshot was created for. See also: README.md

rpm-ostree (0.1)

RPM Ostree See also: README.md

rpm-ostree (0.2)

RPM Ostree See also: MIGRATION.md

s2i-java (0.1)

s2i-java task builds source code into a container image and pushes the image into container registry using S2I and buildah tool. See also: README.md

s2i-nodejs (0.1)

s2i-nodejs task builds source code into a container image and pushes the image into container registry using S2I and buildah tool. See also: README.md

sast-snyk-check (0.1)

Scans source code for security vulnerabilities, including common issues such as SQL injection, cross-site scripting (XSS), and code injection attacks using Snyk Code, a Static Application Security Testing (SAST) tool. See also: README.md

sast-snyk-check (0.2)

Scans source code for security vulnerabilities, including common issues such as SQL injection, cross-site scripting (XSS), and code injection attacks using Snyk Code, a Static Application Security Testing (SAST) tool. See also: README.md MIGRATION.md

sast-snyk-check-oci-ta (0.1)

Scans source code for security vulnerabilities, including common issues such as SQL injection, cross-site scripting (XSS), and code injection attacks using Snyk Code, a Static Application Security Testing (SAST) tool. See also: README.md

sast-snyk-check-oci-ta (0.2)

Scans source code for security vulnerabilities, including common issues such as SQL injection, cross-site scripting (XSS), and code injection attacks using Snyk Code, a Static Application Security Testing (SAST) tool. See also: README.md MIGRATION.md

show-sbom (0.1)

Shows the Software Bill of Materials (SBOM) generated for the built image in CyloneDX JSON format. See also: README.md

show-sbom-rhdh (0.1)

Shows the Software Bill of Materials (SBOM) generated for the built image in CyloneDX JSON format. The 'task.*' annotations are processed by Red Hat Developer Hub (RHDH) so that the log content can be rendered in its UI. See also: README.md

slack-webhook-notification (0.1)

Sends message to slack using incoming webhook See also: README.md

source-build (0.1)

Source image build. See also: README.md

source-build-oci-ta (0.1)

Source image build. See also: README.md

summary (0.1)

Summary Pipeline Task. Prints PipelineRun information, removes image repository secret used by the PipelineRun. See also: README.md

summary (0.2)

Summary Pipeline Task. Prints PipelineRun information, removes image repository secret used by the PipelineRun. See also: README.md MIGRATION.md

tkn-bundle (0.1)

Creates and pushes a Tekton bundle containing the specified Tekton YAML files. See also: README.md

update-deployment (0.1)

Task to update deployment with newly built image in gitops repository. See also: README.md

update-infra-deployments (0.1)

Clones redhat-appstudio/infra-deployments repository, runs script in 'SCRIPT' parameter, generates pull-request for redhat-appstudio/infra-deployments repository. See also: README.md

upload-sbom-to-trustification (0.1)

Upload an SBOM file to [Trustification] using the [BOMbastic] API. See also: README.md

verify-enterprise-contract (0.1)

Verify the enterprise contract is met See also: README.md

verify-signed-rpms (0.1)

See also: README.md