From d333036f6b3dc61aa55408a0633a01881344707d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ernesto=20Gonz=C3=A1lez?= <ergonzal@redhat.com>
Date: Fri, 22 Nov 2024 11:24:53 +0100
Subject: [PATCH] chore: add rpm-signature-scan task to release-2.7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Ernesto González <ergonzal@redhat.com>
---
 .tekton/forklift-must-gather-pull-request.yaml | 17 +++++++++++++++++
 .tekton/forklift-must-gather-push.yaml         | 17 +++++++++++++++++
 2 files changed, 34 insertions(+)

diff --git a/.tekton/forklift-must-gather-pull-request.yaml b/.tekton/forklift-must-gather-pull-request.yaml
index 741a5e4..4e6de44 100644
--- a/.tekton/forklift-must-gather-pull-request.yaml
+++ b/.tekton/forklift-must-gather-pull-request.yaml
@@ -332,6 +332,23 @@ spec:
         operator: in
         values:
         - "false"
+    - name: rpms-signature-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-container.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-container.results.IMAGE_URL)
+      runAfter:
+      - build-container
+      taskRef:
+        params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:28aaf87d61078a0aeeeabcae455eda7d05c4f9b81d8995bdcf3dde95c1a7a77b
+        - name: kind
+          value: task
+        resolver: bundles
     - name: ecosystem-cert-preflight-checks
       params:
       - name: image-url
diff --git a/.tekton/forklift-must-gather-push.yaml b/.tekton/forklift-must-gather-push.yaml
index 9bbc78b..5ef8140 100644
--- a/.tekton/forklift-must-gather-push.yaml
+++ b/.tekton/forklift-must-gather-push.yaml
@@ -331,6 +331,23 @@ spec:
         operator: in
         values:
         - "false"
+    - name: rpms-signature-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-container.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-container.results.IMAGE_URL)
+      runAfter:
+      - build-container
+      taskRef:
+        params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:28aaf87d61078a0aeeeabcae455eda7d05c4f9b81d8995bdcf3dde95c1a7a77b
+        - name: kind
+          value: task
+        resolver: bundles
     - name: ecosystem-cert-preflight-checks
       params:
       - name: image-url