Skip to content

Commit

Permalink
sync ec-cli task definitions
Browse files Browse the repository at this point in the history
  • Loading branch information
lcarva committed Oct 7, 2024
1 parent 4c44b7e commit 724cc19
Show file tree
Hide file tree
Showing 3 changed files with 13 additions and 13 deletions.
4 changes: 2 additions & 2 deletions tasks/verify-definition/0.1/verify-definition.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -60,13 +60,13 @@ spec:
value: "$(params.HOMEDIR)"
steps:
- name: version
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:2504d9c7a6af1a744a6a5673c6e98bb50442f04a614dcac14c9c3ced066aadc4@sha256:5a95a09dbeb6f8195fb254a73f7f91a9a7dd687aeb09bab22ebe7a1788a0abcc@sha256:89f07353036aa0799d81adafcb1cab6895fd22e9ce8bdb7121f9fd3f8c0d1d3a
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:2504d9c7a6af1a744a6a5673c6e98bb50442f04a614dcac14c9c3ced066aadc4@sha256:5a95a09dbeb6f8195fb254a73f7f91a9a7dd687aeb09bab22ebe7a1788a0abcc@sha256:89f07353036aa0799d81adafcb1cab6895fd22e9ce8bdb7121f9fd3f8c0d1d3a
command: [ec]
args:
- version
- name: validate
workingDir: "$(workspaces.output.path)"
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:2504d9c7a6af1a744a6a5673c6e98bb50442f04a614dcac14c9c3ced066aadc4@sha256:5a95a09dbeb6f8195fb254a73f7f91a9a7dd687aeb09bab22ebe7a1788a0abcc@sha256:89f07353036aa0799d81adafcb1cab6895fd22e9ce8bdb7121f9fd3f8c0d1d3a
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91@sha256:2504d9c7a6af1a744a6a5673c6e98bb50442f04a614dcac14c9c3ced066aadc4@sha256:5a95a09dbeb6f8195fb254a73f7f91a9a7dd687aeb09bab22ebe7a1788a0abcc@sha256:89f07353036aa0799d81adafcb1cab6895fd22e9ce8bdb7121f9fd3f8c0d1d3a
command: [ec]
args:
- validate
Expand Down
4 changes: 2 additions & 2 deletions tasks/verify-enterprise-contract/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ kubectl apply -f https://raw.githubusercontent.com/enterprise-contract/ec-cli/ma
* **IMAGES**: A JSON formatted list of images.
### Optional
* **POLICY_CONFIGURATION**: Name or inline policy in JSON configuration to use. For name `namespace/name` or `name` syntax supported. If
namespace is omitted the namespace where the task runs is used. For inline policy provide the [specification](https://enterprise-contract.github.io/ecc/main/reference.html#k8s-api-github-com-enterprise-contract-enterprise-contract-controller-api-v1alpha1-enterprisecontractpolicyspec) as JSON.
namespace is omitted the namespace where the task runs is used. For inline policy provide the [specification](https://enterprisecontract.dev/docs/ecc/reference.html#k8s-api-github-com-enterprise-contract-enterprise-contract-controller-api-v1alpha1-enterprisecontractpolicyspec) as JSON.
* **PUBLIC_KEY**: Public key used to verify signatures. Must be a valid k8s cosign
reference, e.g. k8s://my-space/my-secret where my-secret contains
the expected cosign.pub attribute.
Expand All @@ -27,7 +27,7 @@ kubectl apply -f https://raw.githubusercontent.com/enterprise-contract/ec-cli/ma

## Usage

This TaskRun runs the Task to verify an image. This assumes a policy is created and stored on the cluster with hte namespaced name of `enterprise-contract-service/default`. For more information on creating a policy, refer to the Enterprise Contract [documentation](https://enterprise-contract.github.io/ecc/main/index.html).
This TaskRun runs the Task to verify an image. This assumes a policy is created and stored on the cluster with hte namespaced name of `enterprise-contract-service/default`. For more information on creating a policy, refer to the Enterprise Contract [documentation](https://enterprisecontract.dev/docs/ecc/index.html).

```yaml
apiVersion: tekton.dev/v1
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ spec:
steps:

- name: initialize-tuf
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
script: |-
set -euo pipefail
Expand Down Expand Up @@ -199,12 +199,12 @@ spec:
value: $(params.SINGLE_COMPONENT_CUSTOM_RESOURCE_NS)
- name: SNAPSHOT_PATH
value: $(params.HOMEDIR)/snapshot.json
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
onError: continue # progress even if the step fails so we can see the debug logs
command: [reduce-snapshot.sh]

- name: validate
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
onError: continue # progress even if the step fails so we can see the debug logs
command: [ec]
args:
Expand Down Expand Up @@ -264,40 +264,40 @@ spec:
readOnly: true

- name: report-json
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
onError: continue # progress even if the step fails so we can see the debug logs
command: [cat]
args:
- "$(params.HOMEDIR)/report-json.json"

- name: summary
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
onError: continue # progress even if the step fails so we can see the debug logs
command: [jq]
args:
- "."
- "$(results.TEST_OUTPUT.path)"

- name: info
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
command: [printf]
args:
- "----- DEBUG OUTPUT -----\n"

- name: version
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
command: [ec]
args:
- version

- name: debug-log
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
command: [cat]
args:
- "$(params.HOMEDIR)/debug.log"

- name: assert
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:fc3d267aa00b073be380b4bf4669e1f2f35bdf01ce72604809871712eba4db91
image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:e01246eb815dc690b52859125283f79327153ad3ffe1eea510e9c83aa105094d
command: [jq]
args:
- "--argjson"
Expand Down

0 comments on commit 724cc19

Please sign in to comment.