chore(deps): update konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Notes
quay.io/konflux-ci/tekton-catalog/task-apply-tags	0c411c2 -> 517a51e
quay.io/konflux-ci/tekton-catalog/task-build-image-index	3cf3dcc -> 846dc99
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta	28d8a4f -> 5b8d51f
quay.io/konflux-ci/tekton-catalog/task-clair-scan	68a8fe2 -> d354939
quay.io/konflux-ci/tekton-catalog/task-clamav-scan	386c8c3 -> 9cab95a
quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check	9e81eae -> db2b267
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check	ecd3366 -> 3c8b81f
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks	8a2d3ce -> b550ff4
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta	0e512b1 -> d35e5d5
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta	d0cbc49 -> a1ddc34
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta	995df79 -> 5d8013b
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan	ec7f6de -> 1b6c20a
quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta	dda889f -> d3fdca2
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta	12aa943 -> 808bcaf
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta	0947e18 -> e61f541
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta	0.2 -> 0.3	⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-show-sbom	002f7c8 -> 1b1df4d
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta	f0784e8 -> b424894

---

Configuration

📅 Schedule: Branch creation - "after 5am on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[leo8a]

/lgtm

seems that this needs to be merged in order to address violations observed in Konklux jobs at #111 (e.g., related to "rpms-signature-scan" task)

cc: @imiller0 @irinamihai

[leo8a]

also ccing @rauhersu and @fontivan, this repo has the rpms-signature-scan task, but its sha is different than the one in TALM for instance...

This PR has a fix updating to that sha (among other things inside that I'm not quite sure are currently needed)

[fontivan]

/lgtm

seems that this needs to be merged in order to address violations observed in Konklux jobs at #111 (e.g., related to "rpms-signature-scan" task)

cc: @imiller0 @irinamihai

The sha could be different if renovate ran at different times on different projects, since it will just return the latest version when it runs

Unless the older version is causing a problem I would not worry about the minor difference, it will sync on the next pass again

[leo8a]

Unless the older version is causing a problem I would not worry about the minor difference, it will sync on the next pass again

@fontivan, I managed to get the logs of the failed Konklux jobs (see snipped below). From what I can see, it seems to be causing issues like we need to update to the 1b6c20ab3dbfb0972803d3ebcb2fa72642e59400c77bd66dfd82028bdd09e120 version (which is part of this PR).

Untrusted version of PipelineTask "rpms-signature-scan" (Task "rpms-signature-scan") was included in build chain comprised of: rpms-signature-scan. Please upgrade the task version to: sha256:1b6c20ab3dbfb0972803d3ebcb2fa72642e59400c77bd66dfd82028bdd09e120

[rauhersu]

Yes, that would solve your problem @leo8a. There is no other bot update, so I am guessing we might merge this as the most recent.

/ok-to-test
/lgtm

[shajmakh]

/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: red-hat-konflux[bot], shajmakh

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• .tekton/OWNERS [shajmakh]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment