openshift / openshift/managed-scripts

Dependency Dashboard

Open
#259 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
13
Forks
92
Avg merge
19m
Merged PRs (30d)
2

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
  • ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

  • chore(deps): update konflux references (quay.io/konflux-ci/tekton-catalog/task-apply-tags, quay.io/konflux-ci/tekton-catalog/task-build-image-index, quay.io/konflux-ci/tekton-catalog/task-buildah, quay.io/konflux-ci/tekton-catalog/task-clair-scan, quay.io/konflux-ci/tekton-catalog/task-clamav-scan, quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks, quay.io/konflux-ci/tekton-catalog/task-git-clone, quay.io/konflux-ci/tekton-catalog/task-init, quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies, quay.io/konflux-ci/tekton-catalog/task-push-dockerfile, quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan, quay.io/konflux-ci/tekton-catalog/task-sast-shell-check, quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check, quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check, quay.io/konflux-ci/tekton-catalog/task-source-build)
  • chore(deps): update registry.access.redhat.com/ubi8/ubi docker tag to v8.10-1789523041
  • Click on this checkbox to rebase all open PRs at once

Detected Dependencies

tekton (3)
.tekton/managed-scripts-pull-request.yaml (18)
  • quay.io/konflux-ci/tekton-catalog/task-init 0.4.3@sha256:5f687152ab0661f84830877de93a8ec45cb0b756f71b24ac55133d03a4007936 → [Updates: 0.4.3]
  • quay.io/konflux-ci/tekton-catalog/task-git-clone 0.2.6@sha256:7d5d1ae4cf78c6892cfba764602f9439bc5017c7254a7bb074e598e66916cfb9 → [Updates: 0.2.6]
  • quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies 0.10.1@sha256:f10302a7ecde2ac3bf266144db0ec5253ae2cb3cf768b0205df06b0f631396f3 → [Updates: 0.10.3]
  • quay.io/konflux-ci/tekton-catalog/task-buildah 0.12.0@sha256:19fcabb2afd9d8ce7ca10e980b21cfd9a5443266d6a185fdb6b49b1f01475e44 → [Updates: 0.12.1, 0.12.0]
  • quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3.1@sha256:c2cda69e681c976dd5b39caf6682d1c8f8c5e5a53a67a22a5b06d4cde773bd10 → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-source-build 0.3@sha256:2cedad4914cb07bd6f9edde752d2dab739128fe3df619e72d1ac351022cc27f6 → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
  • quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.4.0@sha256:dcc6ca58d3ec03d05ce21c03b4f51b58cac9878caa932ad06a9fdf4bc422aaab → [Updates: 0.4.1]
  • quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:4619769705d4999e129b779d7699d89d33c47f7ab80d73ad6e3dcd8a6a4e43a7 → [Updates: 0.2]
  • quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check 0.5@sha256:2dc0d6daaf04eb3ae223be8b9eb82b035963a1e5548425f7828dc332c3d65a2b → [Updates: 0.5]
  • quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3.1@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217 → [Updates: 0.3.3]
  • quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check 0.3@sha256:f44de9d91535f0213d747bbbf75ee7f2e69a607a8c9a5ea7ef26bf738e66995a
  • quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
  • quay.io/konflux-ci/tekton-catalog/task-sast-shell-check 0.1@sha256:f3e8337beb9a077353d0bfece67fbe08dc650f23926844492d1b63169b0030e1 → [Updates: 0.1]
  • quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check 0.4@sha256:ca3912444e6f6e9d9242a615f4fb1e07ed8673c3efba408a81cdce8598026767 → [Updates: 0.4]
  • quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:2dae3c4beaf1070db565c536bc997e93925ae8c0c45dd8da9b4ae5293fd8c592 → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-push-dockerfile 0.3.1@sha256:1c404be947468a537ac3ac1ad36351b619fedb6512dfc78f0994443569bd6882 → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2.1@sha256:538a853c4a299216c43258ccc9894215f5440dc0c70c9c99fe22fc9633a8e79d → [Updates: 0.2.2]
.tekton/managed-scripts-push.yaml (18)
  • quay.io/konflux-ci/tekton-catalog/task-init 0.4.3@sha256:5f687152ab0661f84830877de93a8ec45cb0b756f71b24ac55133d03a4007936 → [Updates: 0.4.3]
  • quay.io/konflux-ci/tekton-catalog/task-git-clone 0.2.6@sha256:7d5d1ae4cf78c6892cfba764602f9439bc5017c7254a7bb074e598e66916cfb9 → [Updates: 0.2.6]
  • quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies 0.10.1@sha256:f10302a7ecde2ac3bf266144db0ec5253ae2cb3cf768b0205df06b0f631396f3 → [Updates: 0.10.3]
  • quay.io/konflux-ci/tekton-catalog/task-buildah 0.12.0@sha256:19fcabb2afd9d8ce7ca10e980b21cfd9a5443266d6a185fdb6b49b1f01475e44 → [Updates: 0.12.1, 0.12.0]
  • quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3.1@sha256:c2cda69e681c976dd5b39caf6682d1c8f8c5e5a53a67a22a5b06d4cde773bd10 → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-source-build 0.3@sha256:2cedad4914cb07bd6f9edde752d2dab739128fe3df619e72d1ac351022cc27f6 → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
  • quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.4.0@sha256:dcc6ca58d3ec03d05ce21c03b4f51b58cac9878caa932ad06a9fdf4bc422aaab → [Updates: 0.4.1]
  • quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:4619769705d4999e129b779d7699d89d33c47f7ab80d73ad6e3dcd8a6a4e43a7 → [Updates: 0.2]
  • quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check 0.5@sha256:2dc0d6daaf04eb3ae223be8b9eb82b035963a1e5548425f7828dc332c3d65a2b → [Updates: 0.5]
  • quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3.1@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217 → [Updates: 0.3.3]
  • quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check 0.3@sha256:f44de9d91535f0213d747bbbf75ee7f2e69a607a8c9a5ea7ef26bf738e66995a
  • quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
  • quay.io/konflux-ci/tekton-catalog/task-sast-shell-check 0.1@sha256:f3e8337beb9a077353d0bfece67fbe08dc650f23926844492d1b63169b0030e1 → [Updates: 0.1]
  • quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check 0.4@sha256:ca3912444e6f6e9d9242a615f4fb1e07ed8673c3efba408a81cdce8598026767 → [Updates: 0.4]
  • quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:2dae3c4beaf1070db565c536bc997e93925ae8c0c45dd8da9b4ae5293fd8c592 → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-push-dockerfile 0.3.1@sha256:1c404be947468a537ac3ac1ad36351b619fedb6512dfc78f0994443569bd6882 → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2.1@sha256:538a853c4a299216c43258ccc9894215f5440dc0c70c9c99fe22fc9633a8e79d → [Updates: 0.2.2]
.tekton/pr-check-pipeline.yaml (3)
  • registry.access.redhat.com/ubi8/ubi 8.10-1786322297@sha256:c3c7184394ffb0224e2361a8ce78193aa04601375eae638e66083a8d45afa9b3 → [Updates: 8.10-1789523041]
  • quay.io/konflux-ci/tekton-catalog/task-git-clone 0.2.6@sha256:7d5d1ae4cf78c6892cfba764602f9439bc5017c7254a7bb074e598e66916cfb9 → [Updates: 0.2.6]
  • registry.access.redhat.com/ubi8/ubi 8.10-1786322297@sha256:c3c7184394ffb0224e2361a8ce78193aa04601375eae638e66083a8d45afa9b3 → [Updates: 8.10-1789523041]

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Renovate Dependency Dashboard documentation, then inspect .tekton/managed-scripts-pull-request.yaml, .tekton/managed-scripts-push.yaml, and .tekton/pr-check-pipeline.yaml alongside pull requests 294 and 289. Done means the listed dependency updates and repository warnings are resolved or appropriately handled, but the work is already represented by linked pull requests.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, shell
Domain
ci-cd, devops
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.