Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) #2858

renovate · 2025-08-28T11:58:50Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/tektoncd/pipeline	`v0.66.0` → `v0.70.0`

Release Notes

tektoncd/pipeline (github.com/tektoncd/pipeline)

`v0.70.0`: Tekton Pipeline release v0.70.0 "Norwegian Forest Cat Number Five (Aaron Doral)"

Compare Source

🎉 OpenAPI schema to Tekton CRDs 🎉

-Docs @ v0.70.0
-Examples @ v0.70.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.70.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a9b98c9f620b1202d23cdf7b6bc38da3acecc1a9cb6f206d98fefed3ce02b0e09

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a9b98c9f620b1202d23cdf7b6bc38da3acecc1a9cb6f206d98fefed3ce02b0e09
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.70.0/release.yaml
REKOR_UUID=108e9186e8c5677a9b98c9f620b1202d23cdf7b6bc38da3acecc1a9cb6f206d98fefed3ce02b0e09

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.70.0@&#8203;sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Add structural OpenAPI schema to Tekton CRDs (#8490)

action required: The structural OpenAPI schema to Tekton CRDs are added enabling API server schema validation and supporting kubectl explain to describe fields and structure of Tekton CRDs. Due to the API server schema validation, users should make sure Tekton CRs have a valid schema when creating or updating CRs.

Fixes

🐛 fix: Fix remote task params default-value substitution (#8641)

Task Param defaults will now be correctly substituted in Steps when the Task is referenced by a TaskRun

🐛 fix: configure StepAction to use conversion webhook (#8644)

Misc

🔨 cleanup: breakup the pkg/credentials into writer and matcher + ensure non corev1 usage in entrypoint for FIPs compliance (#8542)

import only the writer part of the credentials package in the entrypoint so that we do not pull core v1 API indirectly into the package

🔨 FIPS Compliance: Refactor Entrypoint, Remove zap Dependency & Update Build Checks (#8544)
🔨 build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#8670)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8668)
🔨 build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 (#8667)
🔨 build(deps): bump actions/cache from 4.2.2 to 4.2.3 (#8666)
🔨 build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 (#8665)
🔨 build(deps): bump tj-actions/changed-files from dcc7a0c to 27ae6b3 (#8664)
🔨 build(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 (#8654)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8653)
🔨 build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 (#8633)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8632)
🔨 build(deps): bump github.com/google/cel-go from 0.23.2 to 0.24.1 (#8614)
🔨 build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#8608)
🔨 Refactor pipelinerun metrics tests (#8340)

Docs

📖 Document ko settings for kind clusters with and without a local registry. (#8662)
📖 Fix wrong entry in development documentation and other minor documentation corrections. (#8661)
📖 Add release 0.69 to releases.md (#8630)

Thanks

Thanks to these contributors who contributed to v0.70.0!

❤️ @PuneetPunamiya
❤️ @aThorp96
❤️ @afrittoli
❤️ @burigolucas
❤️ @dependabot[bot]
❤️ @devholic
❤️ @twoGiants
❤️ @waveywaves

Extra shout-out for awesome release notes:

`v0.69.1`: Tekton Pipeline release v0.69.1 "Oriental Longhair Omnibot"

Compare Source

-Docs @ v0.69.1
-Examples @ v0.69.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.69.1/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a76ee1ec9649527ab153790fc1b5385843dcb8c6522c3d9b0db77451a35b2068f

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a76ee1ec9649527ab153790fc1b5385843dcb8c6522c3d9b0db77451a35b2068f
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.69.1/release.yaml
REKOR_UUID=108e9186e8c5677a76ee1ec9649527ab153790fc1b5385843dcb8c6522c3d9b0db77451a35b2068f

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.69.1@&#8203;sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.69.x] fix: Fix remote task params default-value substitution (#8651)

ask Param defaults will now be correctly substituted in Steps when the Task is referenced by a TaskRun

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.69.1!

❤️ @tekton-robot

Extra shout-out for awesome release notes:

😍 @tekton-robot

`v0.69.0`: Tekton Pipeline release v0.69.0 "Oriental Longhair Omnibot"

Compare Source

-Docs @ v0.69.0
-Examples @ v0.69.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.69.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a83b80360985c8a19920792656acc1566def6a298da6b73bd47b42307bceab304

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a83b80360985c8a19920792656acc1566def6a298da6b73bd47b42307bceab304
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.69.0/release.yaml
REKOR_UUID=108e9186e8c5677a83b80360985c8a19920792656acc1566def6a298da6b73bd47b42307bceab304

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.69.0@&#8203;sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

✨ Add feature flag to set readOnlyRootFilesystem for containers (#8186)

New feature flag set-security-context-read-only-root-filesystem in ConfigMap feature-flags. The new feature sets readOnlyRootFilesystem in securityContext for taskrun and affinity assistant containers.

Fixes

🐛 fix: Move when condition to higher priority (#8569)

fix: Move when condition to higher priority

🐛 fix: resolve panic issue in pipeline controller caused by CustomRun (#8562)

fix: resolve panic issue in pipeline controller caused by CustomRun

Misc

🔨 Bump knative.dev/pkg to release-1.17 (#8538)

Bump knative.dev/pkg to release-1.17 while keeping KUBERNETES_MIN_VERSION to 1.28.

🔨 cleanup: use pkg/platforms instead of containerd/platforms to … (#8579)
🔨 cleanup: add disable_spire build tag for entrypoint command (#8548)
🔨 build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#8619)
🔨 build(deps): bump k8s.io/client-go from 0.31.4 to 0.31.6 (#8618)
🔨 build(deps): bump k8s.io/code-generator from 0.31.4 to 0.31.6 (#8615)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.12 to 1.8.15 (#8613)
🔨 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#8612)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8611)
🔨 build(deps): bump actions/cache from 4.2.1 to 4.2.2 (#8610)
🔨 build(deps): bump tj-actions/changed-files from 45.0.6 to 45.0.7 (#8609)
🔨 chore: add yaml linting to pre-commit (#8606)
🔨 .github/workflow: add only-new-issues on lint (#8604)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.12 to 1.8.15 (#8598)
🔨 build(deps): bump github.com/spiffe/spire-api-sdk from 1.11.1 to 1.11.2 (#8597)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.12 to 1.8.15 (#8596)
🔨 build(deps): bump github.com/sigstore/sigstore from 1.8.12 to 1.8.15 (#8595)
🔨 build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.5.0 (#8594)
🔨 build(deps): bump step-security/harden-runner from 2.10.4 to 2.11.0 (#8593)
🔨 build(deps): bump github/codeql-action from 3.28.8 to 3.28.10 (#8592)
🔨 build(deps): bump actions/setup-go from 5.1.0 to 5.3.0 (#8591)
🔨 build(deps): bump actions/cache from 4.2.0 to 4.2.1 (#8590)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8589)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.12 to 1.8.15 (#8585)
🔨 build(deps): bump k8s.io/api from 0.31.4 to 0.31.6 (#8584)
🔨 .github/workflows: add a build and test workflows (#8577)
🔨 build(deps): bump github.com/jenkins-x/go-scm from 1.14.37 to 1.14.56 (#8576)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8573)
🔨 .github/workflows: force go to 1.23 for the lint job (#8570)
🔨 build(deps): bump github.com/golangci/golangci-lint from 1.63.4 to 1.64.5 in /tools (#8568)
🔨 build(deps): bump k8s.io/client-go from 0.29.13 to 0.29.14 (#8567)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8560)
🔨 build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 (#8557)
🔨 build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 (#8554)
🔨 build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 (#8552)
🔨 build(deps): bump github.com/spiffe/go-spiffe/v2 from 2.4.0 to 2.5.0 (#8551)
🔨 build(deps): bump github.com/google/cel-go from 0.23.1 to 0.23.2 (#8550)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8549)
🔨 tekton: fix micro typo on release-cheat-sheet (#8545)

Docs

📖 releases.md: add 0.68.0 LTS and update other releases (#8559)
📖 chore: fix some comments (#8524)
📖 fix broken link to tutorials.md page (#8444)

Thanks

Thanks to these contributors who contributed to v0.69.0!

❤️ @Allda
❤️ @clintonsteiner
❤️ @damuzhi0810
❤️ @dependabot[bot]
❤️ @jkhelil
❤️ @kristofferchr
❤️ @l-qing
❤️ @vdemeester
❤️ @waveywaves

Extra shout-out for awesome release notes:

😍 @Allda
😍 @kristofferchr
😍 @l-qing
😍 @vdemeester

`v0.68.1`: Tekton Pipeline release v0.68.1 "LaPerm Giskard Reventlov" LTS

Compare Source

-Docs @ v0.68.1
-Examples @ v0.68.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.68.1/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677aff6b780d606f71d6cc2d430e71ac429ad21e107c13490490d164ab33f980851b

Obtain the attestation:

REKOR_UUID=108e9186e8c5677aff6b780d606f71d6cc2d430e71ac429ad21e107c13490490d164ab33f980851b
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.68.1/release.yaml
REKOR_UUID=108e9186e8c5677aff6b780d606f71d6cc2d430e71ac429ad21e107c13490490d164ab33f980851b

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.68.1@&#8203;sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.68.x] fix: Fix remote task params default-value substitution (#8646)

ask Param defaults will now be correctly substituted in Steps when the Task is referenced by a TaskRun

Misc

🔨 [release-v0.68.x] .github/workflows: add a build and test workflows (#8583)

Docs

Thanks

Thanks to these contributors who contributed to v0.68.1!

❤️ @tekton-robot
❤️ @vdemeester

Extra shout-out for awesome release notes:

😍 @tekton-robot

`v0.68.0`: Tekton Pipeline release v0.68.0 "LaPerm Giskard Reventlov" LTS

Compare Source

-Docs @ v0.68.0
-Examples @ v0.68.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.68.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a666d35f8508100e4c8e112033d805978d152a05eef3872377816f3756a588089

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a666d35f8508100e4c8e112033d805978d152a05eef3872377816f3756a588089
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.68.0/release.yaml
REKOR_UUID=108e9186e8c5677a666d35f8508100e4c8e112033d805978d152a05eef3872377816f3756a588089

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.68.0@&#8203;sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

✨ feat: improve step.Script variables references validation message (#8312)

improve step.Script variables references validation message

Fixes

🐛 fix: reference params in default values, allow chained references in stepactions (#8536)

fixes #7935 allowing users to reference other parameters in default values

🐛 fix: avoid panic when validate enum param with special matrix task (#8465)

fix: avoid panic when validate enum param with special matrix task

🐛 Bump go-billy to latest main to fix a git resolver issue (#8306)

Binary file (standard input) matches

🐛 fix: improve parsing logic to handle empty results (#8484)
🐛 fix: minor version check for sidecar logic (#8447)
🐛 fix(computeresource/tasklevel): Fixed a bug where abnormal calculatio… (#8399)

Misc

🔨 better step result referencing and docs for step param substitution order and (#8528)
🔨 build(deps): bump github.com/google/cel-go from 0.22.1 to 0.23.1 (#8541)
🔨 Fix deprecated golangci-lint configuration (#8540)
🔨 build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 (#8534)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8533)
🔨 build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#8530)
🔨 build(deps): bump github.com/go-git/go-git/v5 from 5.13.1 to 5.13.2 (#8527)
🔨 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#8525)
🔨 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.27.0 to 1.34.0 (#8520)
🔨 build(deps): bump github.com/spiffe/spire-api-sdk from 1.10.0 to 1.11.1 (#8519)
🔨 build(deps): bump github.com/google/cel-go from 0.20.1 to 0.22.1 (#8518)
🔨 build(deps): bump github/codeql-action from 3.28.0 to 3.28.1 (#8509)
🔨 build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 (#8508)
🔨 build(deps): bump step-security/harden-runner from 2.10.2 to 2.10.4 (#8507)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8506)
🔨 build(deps): bump go.opentelemetry.io/otel/trace from 1.33.0 to 1.34.0 (#8505)
🔨 build(deps): bump k8s.io/client-go from 0.29.6 to 0.29.13 (#8504)
🔨 build(deps): bump github.com/containerd/containerd from 1.7.20 to 1.7.25 (#8503)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.4 to 1.8.12 (#8502)
🔨 build(deps): bump google.golang.org/grpc from 1.67.3 to 1.69.4 (#8500)
🔨 build(deps): bump k8s.io/code-generator from 0.29.7 to 0.29.13 (#8499)
🔨 build(deps): bump go.opentelemetry.io/otel/sdk from 1.29.0 to 1.33.0 (#8498)
🔨 build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.3 (#8497)
🔨 build(deps): bump k8s.io/api from 0.29.6 to 0.29.13 (#8496)
🔨 build(deps): bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 (#8494)
🔨 build(deps): bump github.com/spiffe/go-spiffe/v2 from 2.3.0 to 2.4.0 (#8493)
🔨 build(deps): bump code.gitea.io/sdk/gitea from 0.18.0 to 0.20.0 (#8491)
🔨 build(deps): bump go.opentelemetry.io/otel/trace from 1.28.0 to 1.33.0 (#8488)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8481)
🔨 Migrate golangci-lint to a github workflow (#8480)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.4 to 1.8.12 (#8478)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.4 to 1.8.12 (#8477)
🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.4 to 1.8.12 (#8476)
🔨 build(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.12 (#8475)
🔨 build(deps): bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.4 in /tools (#8472)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8471)
🔨 build(deps): bump tj-actions/changed-files from 45.0.5 to 45.0.6 (#8470)
🔨 Fixed make goimports (#8461)
🔨 build(deps): bump github/codeql-action from 3.27.9 to 3.28.0 (#8459)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8458)
🔨 .github/workflows: run e2e-matrix on all pull-request (#8454)
🔨 build(deps): bump the all group in /tekton with 2 updates (#8440)
🔨 build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 (#8439)
🔨 build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#8431)
🔨 build(deps): bump golang.org/x/crypto from 0.26.0 to 0.31.0 (#8430)
🔨 build(deps): bump chainguard/go from 551fd4c to 2cc6974 in /tekton in the all group (#8428)
🔨 build(deps): bump tj-actions/changed-files from 45.0.4 to 45.0.5 (#8426)
🔨 build(deps): bump actions/cache from 4.1.1 to 4.2.0 (#8425)
🔨 build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 (#8424)
🔨 Improve gha k8s e2e tests names (#8423)
🔨 Ignore failures when rerunning jobs (#8421)
🔨 Remove extra pip symbol (#8420)
🔨 Fix getting the commit sha from comment event (#8419)
🔨 Add /retest chatops command (#8417)
🔨 chore: fix some function name in comment (#8415)
🔨 Run e2e tests in GHA (#8411)
🔨 tekton: fix bugfix-release.sh script (#8375)
🔨 Make resolvers' maximum resolution timeout configurable (#8366)

Docs

📖 Add PipelineRun pipeline-timeout note to pipeline docs (#8510)
📖 Fix dead admission-webhook blog link in developer docs (#8489)
📖 typo fix (#8437)
📖 docs: replace link to link to page with link to page (#8429)
📖 Updated releases.md for v0.66.0 (#8414)
📖 Remove bad links from StepActions TOC (#8412)

Thanks

Thanks to these contributors who contributed to v0.68.0!

❤️ @AlanGreene
❤️ @Ccheers
❤️ @RenuBhati
❤️ @SaschaSchwarze0
❤️ @aThorp96
❤️ @afrittoli
❤️ @chengjoey
❤️ @chmouel
❤️ @clintonsteiner
❤️ @dependabot[bot]
❤️ @jkhelil
❤️ @justinabrahms
❤️ @l-qing
❤️ @lvyaoting
❤️ @say5
❤️ @vdemeester
❤️ @waveywaves
❤️ @zou2699

Extra shout-out for awesome release notes:

😍 @chengjoey
😍 @l-qing
😍 @vdemeester
😍 @waveywaves

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-08-28T11:58:53Z

ℹ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

9 additional dependencies were updated

Details:

Package	Change
`github.com/go-git/go-billy/v5`	`v5.6.0` -> `v5.6.2`
`github.com/go-git/go-git/v5`	`v5.13.0` -> `v5.13.2`
`github.com/sigstore/sigstore`	`v1.8.9` -> `v1.8.15`
`cloud.google.com/go/kms`	`v1.20.1` -> `v1.20.5`
`github.com/ProtonMail/go-crypto`	`v1.1.3` -> `v1.1.5`
`github.com/pjbgf/sha1cd`	`v0.3.0` -> `v0.3.2`
`github.com/sigstore/protobuf-specs`	`v0.3.2` -> `v0.4.0`
`google.golang.org/api`	`v0.215.0` -> `v0.217.0`
`knative.dev/pkg`	`v0.0.0-20240815051656-89743d9bbf7c` -> `v0.0.0-20250117084104-c43477f0052b`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

20 additional dependencies were updated

Details:

Package	Change
`github.com/sigstore/sigstore`	`v1.8.9` -> `v1.8.15`
`cloud.google.com/go/auth`	`v0.13.0` -> `v0.14.0`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.7`
`github.com/aws/aws-sdk-go-v2`	`v1.30.5` -> `v1.36.1`
`github.com/aws/aws-sdk-go-v2/config`	`v1.27.33` -> `v1.29.1`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.17.32` -> `v1.17.54`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.16.13` -> `v1.16.24`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.17` -> `v1.3.28`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.17` -> `v2.6.28`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.11.4` -> `v1.12.1`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.11.19` -> `v1.12.9`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.22.7` -> `v1.24.11`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.26.7` -> `v1.28.10`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.30.7` -> `v1.33.9`
`github.com/aws/smithy-go`	`v1.20.4` -> `v1.22.2`
`github.com/coreos/go-oidc/v3`	`v3.11.0` -> `v3.12.0`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/sigstore/protobuf-specs`	`v0.3.2` -> `v0.4.0`
`google.golang.org/api`	`v0.215.0` -> `v0.217.0`
`knative.dev/pkg`	`v0.0.0-20240815051656-89743d9bbf7c` -> `v0.0.0-20250117084104-c43477f0052b`

codecov · 2025-08-28T12:05:55Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
generative	`69.55% <ø> (ø)`
integration	`69.55% <ø> (ø)`
unit	`69.55% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate · 2025-09-25T21:06:17Z

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

renovate · 2025-12-12T15:19:14Z

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`knative.dev/pkg`	`v0.0.0-20240815051656-89743d9bbf7c` -> `v0.0.0-20250117084104-c43477f0052b`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`knative.dev/pkg`	`v0.0.0-20240815051656-89743d9bbf7c` -> `v0.0.0-20250117084104-c43477f0052b`

The Tekton Pipeline v0.70.0 update added 50+ new dependencies (Google Cloud SDK, AWS SDK v2, OpenTelemetry exporters, etc.), increasing container build time from 3-5 minutes to 10-15 minutes. This caused acceptance tests to timeout during kind cluster setup when building the container image in a temporary directory without cached modules. Changes: - Increase ACCEPTANCE_TIMEOUT from 20m to 40m to accommodate longer build times with the expanded dependency set - Pre-download Go modules before copying to temp directory, allowing the container build to use cached modules and reducing build time Test results: Acceptance tests now complete in ~23 minutes (within the 40-minute timeout). Previously failed at 20 minutes during cluster setup. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

qodo-code-review · 2026-02-10T23:00:30Z

CI Feedback 🧐

A test triggered by this PR failed. Here is an AI-generated analysis of the failure:

Action: Acceptance
Failed stage: Acceptance test [❌]
Failed test name: TestFeatures
Failure summary: The action failed because the acceptance test suite `TestFeatures` failed due to snapshot mismatches in Tekton task step logs. - In scenario `Initialize TUF succeeds` (`/tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:71`), the step `the task logs for step` `"initialize-tuf" should match the snapshot` failed because the log output format changed: - Snapshot expected JSON-formatted log line: `{"level":"info","ts":${TIMESTAMP},"caller":"entrypoint/entrypointer.go:265","msg":"Step was skipped` `due to when expressions were evaluated to false."}` - Received text-formatted log line: `${TIMESTAMP} INFO Step was skipped due to when expressions were evaluated to false.` - Snapshot file/line: `/tmp/tmp.wcOVXzEwGb/features/snapshots/task_validate_image.snap:495` - The same snapshot mismatch occurred in scenario `Outputs are there` (`/tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:241`) for the `initialize-tuf` step. - Snapshot file/line: `/tmp/tmp.wcOVXzEwGb/features/snapshots/task_validate_image.snap:546` The suite reports `113 scenarios (110 passed, 2 failed, 1 undefined)` and ends with `acceptance_test.go:143: failure in acceptance tests`, causing `make acceptance` to fail (`Makefile:119`) and the job to exit non-zero.
Relevant error logs: 1: ##[group]Runner Image Provisioner 2: Hosted Compute Agent ... 322: Pid: 42825 323: �[4m�[1mEnvironment�[22m�[24m 324: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 325: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 326: COVERAGE_FILENAME=-acceptance 327: HOME=/tmp 328: SIGSTORE_NO_CACHE=1 329: EC_EXPERIMENTAL=1 330: �[4m�[1mVariables�[22m�[24m 331: TMPDIR=/tmp/TestFeatures1464600484/001 332: EC_VERSION=v0.7.0-ci-5950802f 333: �[4m�[1mStdout�[22m�[24m 334: �[32m{"timestamp":"1770763797","namespace":"main","successes":0,"failures":0,"warnings":0,"result":"SKIPPED","note":"All checks were skipped"} 335: �[39m 336: �[4m�[1mStdout�[22m�[24m 337: �[3m* No standard error�[23m 338: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 339: �[1;37mScenario:�[0m appstudio skipped �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:17�[0m ... 361: "filename": "acceptance/examples/empty_input.json", 362: "namespace": "main", 363: "successes": 0, 364: "warnings": [ 365: { 366: "msg": "Has a warning", 367: "metadata": { 368: "query": "data.main.warn" 369: } 370: } 371: ] 372: } 373: ] 374: �[39m 375: �[4m�[1mStdout�[22m�[24m 376: �[3m* No standard error�[23m 377: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 378: �[1;37mScenario:�[0m a warning with fail-on-warn �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:32�[0m 379: �[32mWhen�[0m �[32mec command is run with "test --fail-on-warn -p acceptance/examples/warn.rego acceptance/examples/empty_input.json -o json"�[0m �[1;30m# cli.go:829 -> github.com/conforma/cli/acceptance/cli.ecCommandIsRunWith�[0m ... 400: "filename": "acceptance/examples/empty_input.json", 401: "namespace": "main", 402: "successes": 0, 403: "warnings": [ 404: { 405: "msg": "Has a warning", 406: "metadata": { 407: "query": "data.main.warn" 408: } 409: } 410: ] 411: } 412: ] 413: �[39m 414: �[4m�[1mStdout�[22m�[24m 415: �[3m* No standard error�[23m 416: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 417: �[1;37mScenario:�[0m a warning �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:22�[0m ... 422: dist/ec_linux_amd64 test --no-fail -p file/not/exist.rego acceptance/examples/empty_input.json -o appstudio 423: �[4m�[1mState�[22m�[24m 424: Exit code: 0 425: Pid: 42828 426: �[4m�[1mEnvironment�[22m�[24m 427: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 428: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 429: COVERAGE_FILENAME=-acceptance 430: HOME=/tmp 431: SIGSTORE_NO_CACHE=1 432: EC_EXPERIMENTAL=1 433: �[4m�[1mVariables�[22m�[24m 434: TMPDIR=/tmp/TestFeatures1464600484/004 435: EC_VERSION=v0.7.0-ci-5950802f 436: �[4m�[1mStdout�[22m�[24m 437: �[32m{"timestamp":"1770763797","namespace":"","successes":0,"failures":0,"warnings":0,"result":"ERROR","note":"Error: running test: load: loading policies: load: 1 error occurred during loading: stat file/not/exist.rego: no such file or directory"} 438: �[39m 439: �[4m�[1mStderr�[22m�[24m 440: �[31mError: running test: load: loading policies: load: 1 error occurred during loading: stat file/not/exist.rego: no such file or directory 441: �[39m 442: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 443: �[1;37mScenario:�[0m appstudio error nofail �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:67�[0m 444: �[32mWhen�[0m �[32mec command is run with "test --no-fail -p file/not/exist.rego acceptance/examples/empty_input.json -o appstudio"�[0m �[1;30m# cli.go:829 -> github.com/conforma/cli/acceptance/cli.ecCommandIsRunWith�[0m ... 448: dist/ec_linux_amd64 test -p file/not/exist.rego acceptance/examples/empty_input.json -o appstudio 449: �[4m�[1mState�[22m�[24m 450: Exit code: 1 451: Pid: 42856 452: �[4m�[1mEnvironment�[22m�[24m 453: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 454: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 455: COVERAGE_FILENAME=-acceptance 456: HOME=/tmp 457: SIGSTORE_NO_CACHE=1 458: EC_EXPERIMENTAL=1 459: �[4m�[1mVariables�[22m�[24m 460: TMPDIR=/tmp/TestFeatures1464600484/005 461: EC_VERSION=v0.7.0-ci-5950802f 462: �[4m�[1mStdout�[22m�[24m 463: �[32m{"timestamp":"1770763797","namespace":"","successes":0,"failures":0,"warnings":0,"result":"ERROR","note":"Error: running test: load: loading policies: load: 1 error occurred during loading: stat file/not/exist.rego: no such file or directory"} 464: �[39m 465: �[4m�[1mStderr�[22m�[24m 466: �[31mError: running test: load: loading policies: load: 1 error occurred during loading: stat file/not/exist.rego: no such file or directory 467: �[39m 468: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 469: �[1;37mScenario:�[0m appstudio error �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:62�[0m 470: �[32mWhen�[0m �[32mec command is run with "test -p file/not/exist.rego acceptance/examples/empty_input.json -o appstudio"�[0m �[1;30m# cli.go:829 -> github.com/conforma/cli/acceptance/cli.ecCommandIsRunWith�[0m ... 477: Pid: 42862 478: �[4m�[1mEnvironment�[22m�[24m 479: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 480: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 481: COVERAGE_FILENAME=-acceptance 482: HOME=/tmp 483: SIGSTORE_NO_CACHE=1 484: EC_EXPERIMENTAL=1 485: �[4m�[1mVariables�[22m�[24m 486: TMPDIR=/tmp/TestFeatures1464600484/007 487: EC_VERSION=v0.7.0-ci-5950802f 488: �[4m�[1mStdout�[22m�[24m 489: �[32m{"timestamp":"1770763797","namespace":"main","successes":1,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} 490: �[39m 491: �[4m�[1mStdout�[22m�[24m 492: �[3m* No standard error�[23m 493: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 494: �[1;37mScenario:�[0m appstudio success �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:12�[0m ... 499: dist/ec_linux_amd64 test -p acceptance/examples/fail_with_data.rego --data acceptance/examples/rule_data_1.yaml acceptance/examples/empty_input.json --no-color 500: �[4m�[1mState�[22m�[24m 501: Exit code: 1 502: Pid: 42871 503: �[4m�[1mEnvironment�[22m�[24m 504: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 505: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 506: COVERAGE_FILENAME=-acceptance 507: HOME=/tmp 508: SIGSTORE_NO_CACHE=1 509: EC_EXPERIMENTAL=1 510: �[4m�[1mVariables�[22m�[24m 511: TMPDIR=/tmp/TestFeatures1464600484/008 512: EC_VERSION=v0.7.0-ci-5950802f 513: �[4m�[1mStdout�[22m�[24m 514: �[32mFAIL - acceptance/examples/empty_input.json - main - Failure due to overripeness 515: 1 test, 0 passed, 0 warnings, 1 failure, 0 exceptions 516: �[39m 517: �[4m�[1mStdout�[22m�[24m 518: �[3m* No standard error�[23m 519: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 520: �[1;37mScenario:�[0m plain text deny �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:47�[0m ... 525: dist/ec_linux_amd64 test --no-fail -p acceptance/examples/empty.rego acceptance/examples/broken_input.json -o appstudio 526: �[4m�[1mState�[22m�[24m 527: Exit code: 0 528: Pid: 42857 529: �[4m�[1mEnvironment�[22m�[24m 530: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 531: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 532: COVERAGE_FILENAME=-acceptance 533: HOME=/tmp 534: SIGSTORE_NO_CACHE=1 535: EC_EXPERIMENTAL=1 536: �[4m�[1mVariables�[22m�[24m 537: TMPDIR=/tmp/TestFeatures1464600484/006 538: EC_VERSION=v0.7.0-ci-5950802f 539: �[4m�[1mStdout�[22m�[24m 540: �[32m{"timestamp":"1770763797","namespace":"","successes":0,"failures":0,"warnings":0,"result":"ERROR","note":"Error: running test: parse configurations: parser unmarshal: unmarshal json: invalid character '\\n' in string literal, path: acceptance/examples/broken_input.json"} 541: �[39m 542: �[4m�[1mStderr�[22m�[24m 543: �[31mError: running test: parse configurations: parser unmarshal: unmarshal json: invalid character '\n' in string literal, path: acceptance/examples/broken_input.json 544: �[39m 545: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 546: �[1;37mScenario:�[0m a different appstudio error �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:72�[0m 547: �[32mWhen�[0m �[32mec command is run with "test --no-fail -p acceptance/examples/empty.rego acceptance/examples/broken_input.json -o appstudio"�[0m �[1;30m# cli.go:829 -> github.com/conforma/cli/acceptance/cli.ecCommandIsRunWith�[0m ... 554: Pid: 42888 555: �[4m�[1mEnvironment�[22m�[24m 556: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 557: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 558: COVERAGE_FILENAME=-acceptance 559: HOME=/tmp 560: SIGSTORE_NO_CACHE=1 561: EC_EXPERIMENTAL=1 562: �[4m�[1mVariables�[22m�[24m 563: TMPDIR=/tmp/TestFeatures1464600484/009 564: EC_VERSION=v0.7.0-ci-5950802f 565: �[4m�[1mStdout�[22m�[24m 566: �[32m{"timestamp":"1770763797","namespace":"main","successes":0,"failures":1,"warnings":0,"result":"FAILURE","note":"Failures detected"} 567: �[39m 568: �[4m�[1mStdout�[22m�[24m 569: �[3m* No standard error�[23m 570: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 571: �[1;37mScenario:�[0m appstudio deny �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:52�[0m ... 578: Exit code: 1 579: Pid: 42893 580: �[4m�[1mEnvironment�[22m�[24m 581: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 582: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 583: COVERAGE_FILENAME=-acceptance 584: HOME=/tmp 585: SIGSTORE_NO_CACHE=1 586: EC_EXPERIMENTAL=1 587: �[4m�[1mVariables�[22m�[24m 588: TMPDIR=/tmp/TestFeatures1464600484/010 589: EC_VERSION=v0.7.0-ci-5950802f 590: �[4m�[1mStdout�[22m�[24m 591: �[3m* No standard output�[23m 592: �[4m�[1mStderr�[22m�[24m 593: �[31mError: running test: load: loading policies: load: 1 error occurred during loading: stat file/not/exist.rego: no such file or directory 594: �[39m 595: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 596: �[1;37mScenario:�[0m normal error �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:57�[0m 597: �[32mWhen�[0m �[32mec command is run with "test -p file/not/exist.rego acceptance/examples/empty_input.json -o json"�[0m �[1;30m# cli.go:829 -> github.com/conforma/cli/acceptance/cli.ecCommandIsRunWith�[0m ... 618: "filename": "acceptance/examples/empty_input.json", 619: "namespace": "main", 620: "successes": 0, 621: "failures": [ 622: { 623: "msg": "Failure due to overripeness", 624: "metadata": { 625: "query": "data.main.deny" 626: } 627: } 628: ] 629: } 630: ] 631: �[39m 632: �[4m�[1mStdout�[22m�[24m 633: �[3m* No standard error�[23m 634: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 635: �[1;37mScenario:�[0m a deny �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:37�[0m ... 645: Pid: 42903 646: �[4m�[1mEnvironment�[22m�[24m 647: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 648: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 649: COVERAGE_FILENAME=-acceptance 650: HOME=/tmp 651: SIGSTORE_NO_CACHE=1 652: EC_EXPERIMENTAL=1 653: �[4m�[1mVariables�[22m�[24m 654: TMPDIR=/tmp/TestFeatures1464600484/012 655: EC_VERSION=v0.7.0-ci-5950802f 656: �[4m�[1mStdout�[22m�[24m 657: �[32m{"timestamp":"1770763797","namespace":"main","successes":0,"failures":0,"warnings":1,"result":"WARNING","note":"Warnings detected"} 658: �[39m 659: �[4m�[1mStdout�[22m�[24m 660: �[3m* No standard error�[23m 661: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 662: �[1;37mScenario:�[0m appstudio warning �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:27�[0m ... 676: SIGSTORE_NO_CACHE=1 677: EC_EXPERIMENTAL=1 678: �[4m�[1mVariables�[22m�[24m 679: TMPDIR=/tmp/TestFeatures1464600484/013 680: EC_VERSION=v0.7.0-ci-5950802f 681: �[4m�[1mStdout�[22m�[24m 682: �[32m[ 683: { 684: "filename": "acceptance/examples/empty_input.json", 685: "namespace": "main", 686: "successes": 1 687: } 688: ] 689: �[39m 690: �[4m�[1mStdout�[22m�[24m 691: �[3m* No standard error�[23m 692: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 693: �[1;37mBackground:�[0m ... 719: "filename": "acceptance/examples/empty_input.json", 720: "namespace": "main", 721: "successes": 0, 722: "failures": [ 723: { 724: "msg": "Failure due to overripeness", 725: "metadata": { 726: "query": "data.main.deny" 727: } 728: } 729: ] 730: } 731: ] 732: �[39m 733: �[4m�[1mStdout�[22m�[24m 734: �[3m* No standard error�[23m 735: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 736: �[1;37mScenario:�[0m a deny with no-fail �[1;30m# /tmp/tmp.wcOVXzEwGb/features/conftest_test.feature:42�[0m ... 750: SIGSTORE_NO_CACHE=1 751: EC_EXPERIMENTAL=1 752: �[4m�[1mVariables�[22m�[24m 753: TMPDIR=/tmp/TestFeatures1464600484/015 754: EC_VERSION=v0.7.0-ci-5950802f 755: �[4m�[1mStdout�[22m�[24m 756: �[32m[ 757: { 758: "filename": "acceptance/examples/empty_input.json", 759: "namespace": "main", 760: "successes": 1 761: } 762: ] 763: �[39m 764: �[4m�[1mStdout�[22m�[24m 765: �[3m* No standard error�[23m 766: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 767: �[1;37mBackground:�[0m ... 778: Pid: 42975 779: �[4m�[1mEnvironment�[22m�[24m 780: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 781: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 782: COVERAGE_FILENAME=-acceptance 783: HOME=/tmp 784: SIGSTORE_NO_CACHE=1 785: EC_EXPERIMENTAL=1 786: �[4m�[1mVariables�[22m�[24m 787: TMPDIR=/tmp/TestFeatures1464600484/016 788: EC_VERSION=v0.7.0-ci-5950802f 789: �[4m�[1mStdout�[22m�[24m 790: �[32m{"timestamp":"1770763797","namespace":"main","successes":1,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} 791: �[39m 792: �[4m�[1mStdout�[22m�[24m 793: �[3m* No standard error�[23m 794: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 795: �[1;37mScenario:�[0m appstudio success �[1;30m# /tmp/tmp.wcOVXzEwGb/features/initialize.feature:13�[0m ... 806: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 807: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 808: COVERAGE_FILENAME=-acceptance 809: HOME=/tmp 810: SSL_CERT_FILE=/tmp/git.2354596465/tls/server.cer 811: GIT_SSL_NO_VERIFY=true 812: SIGSTORE_NO_CACHE=1 813: �[4m�[1mVariables�[22m�[24m 814: GITHOST=localhost:32770 815: LATEST_COMMIT=f81eaf65be8da58460ff920408ba1313051184a1 816: EC_VERSION=v0.7.0-ci-5950802f 817: TMPDIR=/tmp/TestFeatures1464600484/018 818: �[4m�[1mStdout�[22m�[24m 819: �[3m* No standard output�[23m 820: �[4m�[1mStderr�[22m�[24m 821: �[31mError: invalid value for --output 'spam'. accepted values: json, text, names, short-names 822: �[39m 823: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 824: �[1;37mScenario:�[0m invalid output option �[1;30m# /tmp/tmp.wcOVXzEwGb/features/inspect_policy.feature:21�[0m ... 841: SIGSTORE_NO_CACHE=1 842: �[4m�[1mVariables�[22m�[24m 843: GITHOST=localhost:32769 844: LATEST_COMMIT=f81eaf65be8da58460ff920408ba1313051184a1 845: EC_VERSION=v0.7.0-ci-5950802f 846: TMPDIR=/tmp/TestFeatures1464600484/017 847: �[4m�[1mStdout�[22m�[24m 848: �[32m# Source: git::localhost:32769/git/policy.git?ref=f81eaf65be8da58460ff920408ba1313051184a1 849: kitty.purr (deny) 850: https://conforma.dev/docs/policy/packages/release_kitty.html#kitty__purr 851: Kittens 852: Fluffy 853: -- 854: �[39m 855: �[4m�[1mStdout�[22m�[24m 856: �[3m* No standard error�[23m 857: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 858: �[1;37mBackground:�[0m ... 873: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 874: COVERAGE_FILENAME=-acceptance 875: HOME=/tmp 876: SSL_CERT_FILE=/tmp/git.1703510965/tls/server.cer 877: GIT_SSL_NO_VERIFY=true 878: SIGSTORE_NO_CACHE=1 879: �[4m�[1mVariables�[22m�[24m 880: TMPDIR=/tmp/TestFeatures1464600484/019 881: GITHOST=localhost:32771 882: LATEST_COMMIT=f81eaf65be8da58460ff920408ba1313051184a1 883: EC_VERSION=v0.7.0-ci-5950802f 884: �[4m�[1mStdout�[22m�[24m 885: �[32m{"git::localhost:32771/git/policy.git?ref=f81eaf65be8da58460ff920408ba1313051184a1":[{"annotations":{"custom":{"short_name":"purr"},"description":"Fluffy","scope":"rule","title":"Kittens"},"location":{"file":"main.rego","row":11,"col":1},"path":[{"type":"var","value":"data"},{"type":"string","value":"kitty"},{"type":"string","value":"deny"}]}]} 886: �[39m 887: �[4m�[1mStdout�[22m�[24m 888: �[3m* No standard error�[23m 889: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 890: �[1;37mScenario:�[0m json output �[1;30m# /tmp/tmp.wcOVXzEwGb/features/inspect_policy.feature:27�[0m ... 902: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 903: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 904: COVERAGE_FILENAME=-acceptance 905: HOME=/tmp 906: SSL_CERT_FILE=/tmp/git.4188763106/tls/server.cer 907: GIT_SSL_NO_VERIFY=true 908: SIGSTORE_NO_CACHE=1 909: �[4m�[1mVariables�[22m�[24m 910: TMPDIR=/tmp/TestFeatures1464600484/020 911: GITHOST=localhost:32772 912: LATEST_COMMIT=ffd9d0839baf7bff2c65e0bf0006d5209c627672 913: EC_VERSION=v0.7.0-ci-5950802f 914: �[4m�[1mStdout�[22m�[24m 915: �[3m* No standard output�[23m 916: �[4m�[1mStderr�[22m�[24m 917: �[31mError: Merge error. The 'rule_data' key was found more than once! 918: �[39m 919: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 920: �[1;37mScenario:�[0m inspecting a data source with a merge error �[1;30m# /tmp/tmp.wcOVXzEwGb/features/inspect_policy.feature:42�[0m 921: �[32mGiven�[0m �[32ma git repository named "policy-data" with�[0m �[1;30m# git.go:297 -> github.com/conforma/cli/acceptance/git.createGitRepository�[0m ... 965: --debug same as verbose but also show function names and line numbers 966: --kubeconfig string path to the Kubernetes config file to use 967: --logfile string file to write the logging output. If not specified logging output will be written to stderr 968: --quiet less verbose output 969: --retry-duration duration base duration for exponential backoff calculation (default 1s) 970: --retry-factor float exponential backoff multiplier (default 2) 971: --retry-jitter float randomness factor for backoff calculation (0.0-1.0) (default 0.1) 972: --retry-max-retry int maximum number of retry attempts (default 3) 973: --retry-max-wait duration maximum wait time between retries (default 3s) 974: --timeout duration max overall execution duration (default 5m0s) 975: --trace string[="log"] enable trace logging, set one or more comma separated values: none,all,perf,cpu,mem,opa,log (default "none") 976: --verbose more verbose output 977: Use "ec opa [command] --help" for more information about a command. 978: �[39m 979: �[4m�[1mStdout�[22m�[24m 980: �[3m* No standard error�[23m 981: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 982: �[1;37mScenario:�[0m OPA sub-command is available �[1;30m# /tmp/tmp.wcOVXzEwGb/features/opa.feature:4�[0m ... 992: Pid: 44041 993: �[4m�[1mEnvironment�[22m�[24m 994: PATH=/opt/hostedtoolcache/go/1.24.6/x64/bin:/home/runner/go/bin:/opt/hostedtoolcache/go/1.24.6/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin 995: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 996: COVERAGE_FILENAME=-acceptance 997: HOME=/tmp 998: SSL_CERT_FILE=/tmp/git.3347463377/tls/server.cer 999: GIT_SSL_NO_VERIFY=true 1000: SIGSTORE_NO_CACHE=1 1001: �[4m�[1mVariables�[22m�[24m 1002: GITHOST=localhost:32773 1003: LATEST_COMMIT=e4033ae2165400742f8527f9cb6a6d905fa6be7b 1004: EC_VERSION=v0.7.0-ci-5950802f 1005: TMPDIR=/tmp/TestFeatures1464600484/022 1006: �[4m�[1mStdout�[22m�[24m 1007: �[32m{"rule_data":{"banana_fail_reason":"spider attack"},"spam_count":42} 1008: �[39m 1009: �[4m�[1mStdout�[22m�[24m 1010: �[3m* No standard error�[23m 1011: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 1012: �[1;37mScenario:�[0m inspecting a data source �[1;30m# /tmp/tmp.wcOVXzEwGb/features/inspect_policy.feature:34�[0m ... 1028: COVERAGE_FILEPATH=/tmp/tmp.wcOVXzEwGb 1029: COVERAGE_FILENAME=-acceptance 1030: HOME=/tmp 1031: SSL_CERT_FILE=/tmp/git.153064300/tls/server.cer 1032: GIT_SSL_NO_VERIFY=true 1033: SIGSTORE_NO_CACHE=1 1034: �[4m�[1mVariables�[22m�[24m 1035: LATEST_COMMIT=f81eaf65be8da58460ff920408ba1313051184a1 1036: EC_VERSION=v0.7.0-ci-5950802f 1037: TMPDIR=/tmp/TestFeatures1464600484/023 1038: GITHOST=localhost:32775 1039: �[4m�[1mStdout�[22m�[24m 1040: �[32mkitty.purr 1041: �[39m 1042: �[4m�[1mStdout�[22m�[24m 1043: �[3m* No standard error�[23m 1044: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 1045: �[1;37mScenario:�[0m short names output �[1;30m# /tmp/tmp.wcOVXzEwGb/features/inspect_policy.feature:14�[0m ... 1066: TMPDIR=/tmp/TestFeatures1464600484/024 1067: GITHOST=localhost:32774 1068: LATEST_COMMIT=7e2406bbafba94a4ecf1b5e59f9211c6597f58f7 1069: EC_VERSION=v0.7.0-ci-5950802f 1070: �[4m�[1mStdout�[22m�[24m 1071: �[32m# Source: git::localhost:32774/git/policy1.git?ref=f81eaf65be8da58460ff920408ba1313051184a1 1072: kitty.purr (deny) 1073: https://conforma.dev/docs/policy/packages/release_kitty.html#kitty__purr 1074: Kittens 1075: Fluffy 1076: -- 1077: # Source: git::localhost:32774/git/policy2.git?ref=7e2406bbafba94a4ecf1b5e59f9211c6597f58f7 1078: main.rejector (deny) 1079: https://conforma.dev/docs/policy/packages/release_main.html#main__rejector 1080: Reject rule 1081: This rule will always fail 1082: [A] 1083: -- 1084: main.reject_with_term (deny) 1085: https://conforma.dev/docs/policy/packages/release_main.html#main__reject_with_term 1086: Reject with term rule 1087: This rule will always fail 1088: [A] 1089: -- 1090: �[39m 1091: �[4m�[1mStdout�[22m�[24m 1092: �[3m* No standard error�[23m 1093: �[1mHINT�[22m: To recreate the failure re-run the test with `-args -persist` to persist the stubbed environment 1094: �[1;37mScenario:�[0m sources from ECP �[1;30m# /tmp/tmp.wcOVXzEwGb/features/inspect_policy.feature:50�[0m ... 1103: �[36m "sources": [�[0m 1104: �[36m {�[0m 1105: �[36m "policy": [�[0m 1106: �[36m "git::https://${GITHOST}/git/policy1.git",�[0m 1107: �[36m "git::https://${GITHOST}/git/policy2.git"�[0m 1108: �[36m ]�[0m 1109: �[36m }�[0m 1110: �[36m ]�[0m 1111: �[36m}�[0m 1112: �[36m"""�[0m 1113: �[32mWhen�[0m �[32mec command is run with "inspect policy --policy acceptance/ec-policy"�[0m �[1;30m# cli.go:829 -> github.com/conforma/cli/acceptance/cli.ecCommandIsRunWith�[0m 1114: �[32mThen�[0m �[32mthe exit status should be 0�[0m �[1;30m# cli.go:830 -> github.com/conforma/cli/acceptance/cli.theExitStatusIs�[0m 1115: �[32mThen�[0m �[32mthe output should match the snapshot�[0m �[1;30m# cli.go:835 -> github.com/conforma/cli/acceptance/cli.matchSnapshot�[0m 1116: go: downloading sigs.k8s.io/kustomize/cmd/config v0.20.1 1117: go: downloading golang.org/x/text v0.29.0 1118: E0210 22:51:05.824280 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=794&timeoutSeconds=372&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1119: E0210 22:56:05.964198 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1120: E0210 22:56:05.965715 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=1614&timeoutSeconds=583&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1121: E0210 22:56:09.938249 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1122: E0210 22:56:09.939797 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1123: E0210 22:56:10.139390 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/tekton-pipelines/deployments?allowWatchBookmarks=true&resourceVersion=1668&timeoutSeconds=303&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1124: E0210 22:56:10.140855 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=1668&timeoutSeconds=473&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1125: file descriptor for snapshotartifact.tar.gz: {application/vnd.test.file sha256:bb8951ce9a7a020a48847c23f81ea5721d91d6a4278111c7623923272718eafd 247 [] map[org.opencontainers.image.title:snapshotartifact.tar.gz] [] <nil> } 1126: manifest descriptor: {application/vnd.oci.image.manifest.v1+json sha256:842bf5764f4e0bf6ade65efdf608548c793ef8738890b78ad1eb15a8445be31d 584 [] map[org.opencontainers.image.created:2026-02-10T22:56:10Z] [] <nil> application/vnd.test.artifact} 1127: artifactRepo: 127.0.0.1:34797/acceptance/snapshotartifact 1128: snapshotDigest: sha256:842bf5764f4e0bf6ade65efdf608548c793ef8738890b78ad1eb15a8445be31d 1129: E0210 22:56:10.940697 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/tekton-pipelines/deployments?allowWatchBookmarks=true&resourceVersion=1668&timeoutSeconds=591&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1130: E0210 22:56:10.942175 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=1668&timeoutSeconds=362&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1131: �[1;37mScenario:�[0m PUBLIC_KEY param overwrites key from policy �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:320�[0m ... 1135: �[32mAnd�[0m �[32ma valid image signature of "acceptance/public-key-param" image signed by the "known" key�[0m �[1;30m# image.go:990 -> github.com/conforma/cli/acceptance/image.CreateAndPushImageSignature�[0m 1136: �[32mAnd�[0m �[32ma valid attestation of "acceptance/public-key-param" signed by the "known" key�[0m �[1;30m# image.go:991 -> github.com/conforma/cli/acceptance/image.CreateAndPushAttestation�[0m 1137: �[32mAnd�[0m �[32ma valid attestation of "acceptance/public-key-param" signed by the "known" key�[0m �[1;30m# image.go:991 -> github.com/conforma/cli/acceptance/image.CreateAndPushAttestation�[0m 1138: �[32mAnd�[0m �[32ma cluster policy with content:�[0m �[1;30m# kubernetes.go:469 -> github.com/conforma/cli/acceptance/kubernetes.createPolicy�[0m 1139: �[36m```�[0m 1140: �[36m{"publicKey": "ignored"}�[0m 1141: �[36m```�[0m 1142: �[32mWhen�[0m �[32mversion 0.1 of the task named "verify-enterprise-contract" is run with parameters:�[0m �[1;30m# kubernetes.go:470 -> github.com/conforma/cli/acceptance/kubernetes.runTask�[0m 1143: \| �[36mIMAGES�[0m \| �[36m{"components": [{"containerImage": "${REGISTRY}/acceptance/public-key-param"}]}�[0m \| 1144: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1145: \| �[36mPUBLIC_KEY�[0m \| �[36m${known_PUBLIC_KEY}�[0m \| 1146: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1147: �[32mThen�[0m �[32mthe task should succeed�[0m �[1;30m# kubernetes.go:472 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldSucceed�[0m 1148: �[32mAnd�[0m �[32mthe task logs for step "report" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1149: �[32mAnd�[0m �[32mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1150: E0210 22:56:26.259660 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1151: E0210 22:56:26.261103 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=1937&timeoutSeconds=458&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1152: �[1;37mBackground:�[0m ... 1184: �[36m ]�[0m 1185: �[36m}�[0m 1186: �[36m```�[0m 1187: �[32mWhen�[0m �[32mversion 0.1 of the task named "verify-conforma-konflux-ta" is run with parameters:�[0m �[1;30m# kubernetes.go:470 -> github.com/conforma/cli/acceptance/kubernetes.runTask�[0m 1188: \| �[36mSNAPSHOT_FILENAME�[0m \| �[36msnapshotartifact�[0m \| 1189: \| �[36mSOURCE_DATA_ARTIFACT�[0m \| �[36moci:${REGISTRY}/acceptance/snapshotartifact@${BUILD_SNAPSHOT_DIGEST}�[0m \| 1190: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1191: \| �[36mSTRICT�[0m \| �[36mtrue�[0m \| 1192: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1193: \| �[36mTRUSTED_ARTIFACTS_DEBUG�[0m \| �[36m"true"�[0m \| 1194: \| �[36mORAS_OPTIONS�[0m \| �[36m--plain-http�[0m \| 1195: �[32mThen�[0m �[32mthe task should succeed�[0m �[1;30m# kubernetes.go:472 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldSucceed�[0m 1196: �[32mAnd�[0m �[32mthe task logs for step "report-json" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1197: �[32mAnd�[0m �[32mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1198: �[32mAnd�[0m �[32mthe task logs for step "show-config" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1199: E0210 22:56:51.655118 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1200: E0210 22:56:51.656377 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=2150&timeoutSeconds=325&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1201: �[1;37mScenario:�[0m Initialize TUF succeeds �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:71�[0m ... 1224: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1225: \| �[36mTUF_MIRROR�[0m \| �[36m${TUF}�[0m \| 1226: \| �[36mSTRICT�[0m \| �[36mtrue�[0m \| 1227: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1228: �[32mThen�[0m �[32mthe task should succeed�[0m �[1;30m# kubernetes.go:472 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldSucceed�[0m 1229: �[32mAnd�[0m �[32mthe task logs for step "report" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1230: �[31mAnd�[0m �[31mthe task logs for step "initialize-tuf" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1231: �[1;31m 1232: �[38;5;52m�[48;5;225m- Snapshot - 2�[0m 1233: �[38;5;22m�[48;5;159m+ Received + 1�[0m 1234: �[48;5;225m�[38;5;52m- �[0m�[48;5;127m�[38;5;255m{"level":"info","ts":${TIMESTAMP},"caller":"entrypoint/entrypointer.go:265","msg":"�[0m�[48;5;225m�[38;5;52mStep was skipped due to when expressions were evaluated to false.�[0m�[48;5;127m�[38;5;255m"}�[0m�[48;5;225m�[38;5;52m�[0m 1235: �[48;5;159m�[38;5;22m+ �[0m�[48;5;23m�[38;5;255m${TIMESTAMP} INFO �[0m�[48;5;159m�[38;5;22mStep was skipped due to when expressions were evaluated to false.�[0m�[48;5;159m�[38;5;22m�[0m 1236: �[2mat ../../../../../../../../tmp/tmp.wcOVXzEwGb/features/__snapshots__/task_validate_image.snap:495 1237: �[0m�[0m 1238: �[36mAnd�[0m �[36mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1239: E0210 22:56:56.256207 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1240: E0210 22:56:56.257507 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1241: �[1;37mScenario:�[0m Initialize TUF fails �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:103�[0m 1242: �[32mGiven�[0m �[32ma working namespace�[0m �[1;30m# kubernetes.go:466 -> github.com/conforma/cli/acceptance/kubernetes.createNamespace�[0m ... 1253: �[36m "config": {�[0m 1254: �[36m "include": [�[0m 1255: �[36m "slsa_provenance_available"�[0m 1256: �[36m ]�[0m 1257: �[36m }�[0m 1258: �[36m }�[0m 1259: �[36m ]�[0m 1260: �[36m}�[0m 1261: �[36m```�[0m 1262: �[32mWhen�[0m �[32mversion 0.1 of the task named "verify-enterprise-contract" is run with parameters:�[0m �[1;30m# kubernetes.go:470 -> github.com/conforma/cli/acceptance/kubernetes.runTask�[0m 1263: \| �[36mIMAGES�[0m \| �[36m{"components": [{"containerImage": "quay.io/hacbs-contract-demo/golden-container@sha256:e76a4ae9dd8a52a0d191fd34ca133af5b4f2609536d32200a4a40a09fdc93a0d"}]}�[0m \| 1264: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1265: \| �[36mTUF_MIRROR�[0m \| �[36mhttp://tuf.invalid�[0m \| 1266: \| �[36mSTRICT�[0m \| �[36mtrue�[0m \| 1267: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1268: �[32mThen�[0m �[32mthe task should fail�[0m �[1;30m# kubernetes.go:473 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldFail�[0m 1269: �[32mAnd�[0m �[32mthe task logs for step "report" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1270: �[32mAnd�[0m �[32mthe task logs for step "initialize-tuf" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1271: �[32mAnd�[0m �[32mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1272: E0210 22:57:04.454367 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1273: E0210 22:57:04.455749 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1274: �[1;37mScenario:�[0m Strict with warnings �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:170�[0m ... 1310: �[32mAnd�[0m �[32ma key pair named "known"�[0m �[1;30m# keys.go:135 -> github.com/conforma/cli/acceptance/crypto.GenerateKeyPairNamed�[0m 1311: �[32mAnd�[0m �[32man image named "acceptance/ssl-cert-dir"�[0m �[1;30m# image.go:987 -> github.com/conforma/cli/acceptance/image.CreateAndPushImageWithParent�[0m 1312: �[32mAnd�[0m �[32ma valid image signature of "acceptance/ssl-cert-dir" image signed by the "known" key�[0m �[1;30m# image.go:990 -> github.com/conforma/cli/acceptance/image.CreateAndPushImageSignature�[0m 1313: �[32mAnd�[0m �[32ma valid attestation of "acceptance/ssl-cert-dir" signed by the "known" key�[0m �[1;30m# image.go:991 -> github.com/conforma/cli/acceptance/image.CreateAndPushAttestation�[0m 1314: �[32mAnd�[0m �[32ma cluster policy with content:�[0m �[1;30m# kubernetes.go:469 -> github.com/conforma/cli/acceptance/kubernetes.createPolicy�[0m 1315: �[36m```�[0m 1316: �[36m{"publicKey": ${known_PUBLIC_KEY}}�[0m 1317: �[36m```�[0m 1318: �[32mWhen�[0m �[32mversion 0.1 of the task named "verify-enterprise-contract" is run with parameters:�[0m �[1;30m# kubernetes.go:470 -> github.com/conforma/cli/acceptance/kubernetes.runTask�[0m 1319: \| �[36mIMAGES�[0m \| �[36m{"components": [{"containerImage": "${REGISTRY}/acceptance/ssl-cert-dir"}]}�[0m \| 1320: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1321: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1322: \| �[36mSSL_CERT_DIR�[0m \| �[36m/spam/certs�[0m \| 1323: �[32mThen�[0m �[32mthe task should succeed�[0m �[1;30m# kubernetes.go:472 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldSucceed�[0m 1324: �[32mAnd�[0m �[32mthe task env var for step "validate" named "SSL_CERT_DIR" should be set to "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs:/system/etc/security/cacerts:/spam/certs"�[0m �[1;30m# kubernetes.go:478 -> github.com/conforma/cli/acceptance/kubernetes.stepEnvVarShouldBe�[0m 1325: E0210 22:57:12.700882 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/tekton-pipelines/deployments?allowWatchBookmarks=true&resourceVersion=2394&timeoutSeconds=389&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1326: E0210 22:57:12.710391 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=2394&timeoutSeconds=535&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1327: E0210 22:57:14.850629 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1328: E0210 22:57:14.851946 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=2465&timeoutSeconds=403&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1329: �[1;37mScenario:�[0m Strict with failures �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:223�[0m 1330: �[32mGiven�[0m �[32ma working namespace�[0m �[1;30m# kubernetes.go:466 -> github.com/conforma/cli/acceptance/kubernetes.createNamespace�[0m 1331: �[32mAnd�[0m �[32ma key pair named "known"�[0m �[1;30m# keys.go:135 -> github.com/conforma/cli/acceptance/crypto.GenerateKeyPairNamed�[0m 1332: �[32mAnd�[0m �[32ma cluster policy with content:�[0m �[1;30m# kubernetes.go:469 -> github.com/conforma/cli/acceptance/kubernetes.createPolicy�[0m 1333: �[36m```�[0m 1334: �[36m{�[0m 1335: �[36m "publicKey": ${known_PUBLIC_KEY}�[0m 1336: �[36m}�[0m 1337: �[36m```�[0m 1338: �[32mWhen�[0m �[32mversion 0.1 of the task named "verify-enterprise-contract" is run with parameters:�[0m �[1;30m# kubernetes.go:470 -> github.com/conforma/cli/acceptance/kubernetes.runTask�[0m 1339: \| �[36mIMAGES�[0m \| �[36m{"components": [{"containerImage": "${REGISTRY}/acceptance/does-not-exist"}]}�[0m \| 1340: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1341: \| �[36mSTRICT�[0m \| �[36mtrue�[0m \| 1342: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1343: �[32mThen�[0m �[32mthe task should fail�[0m �[1;30m# kubernetes.go:473 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldFail�[0m 1344: �[32mAnd�[0m �[32mthe task logs for step "report" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1345: �[32mAnd�[0m �[32mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1346: E0210 22:57:20.605190 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1347: E0210 22:57:20.606385 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=2545&timeoutSeconds=342&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1348: �[1;37mScenario:�[0m Extra rule data provided to task �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:40�[0m ... 1363: �[36m ]�[0m 1364: �[36m }�[0m 1365: �[36m }�[0m 1366: �[36m ]�[0m 1367: �[36m}�[0m 1368: �[36m```�[0m 1369: �[32mWhen�[0m �[32mversion 0.1 of the task named "verify-enterprise-contract" is run with parameters:�[0m �[1;30m# kubernetes.go:470 -> github.com/conforma/cli/acceptance/kubernetes.runTask�[0m 1370: \| �[36mIMAGES�[0m \| �[36m{"components": [{"containerImage": "quay.io/hacbs-contract-demo/golden-container@sha256:e76a4ae9dd8a52a0d191fd34ca133af5b4f2609536d32200a4a40a09fdc93a0d"}]}�[0m \| 1371: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1372: \| �[36mSTRICT�[0m \| �[36mtrue�[0m \| 1373: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1374: \| �[36mEXTRA_RULE_DATA�[0m \| �[36mkey1=value1,key2=value2�[0m \| 1375: �[32mThen�[0m �[32mthe task should succeed�[0m �[1;30m# kubernetes.go:472 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldSucceed�[0m 1376: �[32mAnd�[0m �[32mthe task logs for step "report" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1377: �[32mAnd�[0m �[32mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1378: E0210 22:57:36.533808 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/tekton-pipelines/deployments?allowWatchBookmarks=true&resourceVersion=2692&timeoutSeconds=400&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1379: E0210 22:57:36.535445 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=2692&timeoutSeconds=510&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1380: �[1;37mScenario:�[0m Outputs are there �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:241�[0m ... 1395: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1396: �[32mThen�[0m �[32mthe task should succeed�[0m �[1;30m# kubernetes.go:472 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldSucceed�[0m 1397: �[31mAnd�[0m �[31mthe task logs for step "initialize-tuf" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1398: �[1;31m 1399: �[38;5;52m�[48;5;225m- Snapshot - 2�[0m 1400: �[38;5;22m�[48;5;159m+ Received + 1�[0m 1401: �[48;5;225m�[38;5;52m- �[0m�[48;5;127m�[38;5;255m{"level":"info","ts":${TIMESTAMP},"caller":"entrypoint/entrypointer.go:265","msg":"�[0m�[48;5;225m�[38;5;52mStep was skipped due to when expressions were evaluated to false.�[0m�[48;5;127m�[38;5;255m"}�[0m�[48;5;225m�[38;5;52m�[0m 1402: �[48;5;159m�[38;5;22m+ �[0m�[48;5;23m�[38;5;255m${TIMESTAMP} INFO �[0m�[48;5;159m�[38;5;22mStep was skipped due to when expressions were evaluated to false.�[0m�[48;5;159m�[38;5;22m�[0m 1403: �[2mat ../../../../../../../../tmp/tmp.wcOVXzEwGb/features/__snapshots__/task_validate_image.snap:546 1404: �[0m�[0m 1405: �[36mAnd�[0m �[36mthe task logs for step "report" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1406: �[36mAnd�[0m �[36mthe task logs for step "summary" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1407: �[36mAnd�[0m �[36mthe task logs for step "assert" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1408: �[36mAnd�[0m �[36mthe task logs for step "report-json" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1409: �[36mAnd�[0m �[36mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1410: E0210 22:57:40.082554 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1411: E0210 22:57:40.084380 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=2692&timeoutSeconds=430&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1412: �[1;37mScenario:�[0m Titles and descriptions can be excluded �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:265�[0m ... 1415: �[32mAnd�[0m �[32man image named "acceptance/info"�[0m �[1;30m# image.go:987 -> github.com/conforma/cli/acceptance/image.CreateAndPushImageWithParent�[0m 1416: �[32mAnd�[0m �[32ma valid image signature of "acceptance/info" image signed by the "known" key�[0m �[1;30m# image.go:990 -> github.com/conforma/cli/acceptance/image.CreateAndPushImageSignature�[0m 1417: �[32mAnd�[0m �[32ma valid attestation of "acceptance/info" signed by the "known" key�[0m �[1;30m# image.go:991 -> github.com/conforma/cli/acceptance/image.CreateAndPushAttestation�[0m 1418: �[32mAnd�[0m �[32ma cluster policy with content:�[0m �[1;30m# kubernetes.go:469 -> github.com/conforma/cli/acceptance/kubernetes.createPolicy�[0m 1419: �[36m```�[0m 1420: �[36m{"publicKey": ${known_PUBLIC_KEY}}�[0m 1421: �[36m```�[0m 1422: �[32mWhen�[0m �[32mversion 0.1 of the task named "verify-enterprise-contract" is run with parameters:�[0m �[1;30m# kubernetes.go:470 -> github.com/conforma/cli/acceptance/kubernetes.runTask�[0m 1423: \| �[36mIMAGES�[0m \| �[36m{"components": [{"containerImage": "${REGISTRY}/acceptance/info"}]}�[0m \| 1424: \| �[36mPOLICY_CONFIGURATION�[0m \| �[36m${NAMESPACE}/${POLICY_NAME}�[0m \| 1425: \| �[36mIGNORE_REKOR�[0m \| �[36mtrue�[0m \| 1426: \| �[36mINFO�[0m \| �[36mfalse�[0m \| 1427: �[32mThen�[0m �[32mthe task should succeed�[0m �[1;30m# kubernetes.go:472 -> github.com/conforma/cli/acceptance/kubernetes.theTaskShouldSucceed�[0m 1428: �[32mAnd�[0m �[32mthe task logs for step "report" should match the snapshot�[0m �[1;30m# kubernetes.go:476 -> github.com/conforma/cli/acceptance/kubernetes.taskLogsShouldMatchTheSnapshot�[0m 1429: �[32mAnd�[0m �[32mthe task results should match the snapshot�[0m �[1;30m# kubernetes.go:479 -> github.com/conforma/cli/acceptance/kubernetes.taskResultsShouldMatchTheSnapshot�[0m 1430: E0210 22:57:49.139617 42598 reflector.go:205] "Failed to watch" err="context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="v1.Deployment" 1431: E0210 22:57:49.140869 42598 reflector.go:205] "Failed to watch" err="Get \"https://127.0.0.1:43161/apis/apps/v1/namespaces/image-registry/deployments?allowWatchBookmarks=true&resourceVersion=2881&timeoutSeconds=593&watch=true\": context canceled" logger="UnhandledError" reflector="pkg/mod/k8s.io/client-go@v0.34.3/tools/cache/reflector.go:290" type="*v1.Deployment" 1432: �[1;37mScenario:�[0m Effective-time is honored �[1;30m# /tmp/tmp.wcOVXzEwGb/features/task_validate_image.feature:284�[0m ... 1466: TMPDIR=/tmp/TestFeatures1464600484/025 1467: REGISTRY=localhost:32820 1468: REGISTRY_tracked/bundle:tag_DIGEST=b04c5da15fdc994dd78e2f63d2efc1e85aae15fd104abb63cc5821ff9bf3190b 1469: REGISTRY_acceptance/bundle:1.0_DIGEST=0af8c4f92f4b252b3ef0cbd712e7352196bc33a96c58b6e1d891b26e171deae8 1470: REGISTRY_acceptance/bundle:1.1_DIGEST=7af058b8a7adb24b74875411d625afbf90af6b4ed41b740606032edf1c4a0d1d 1471: GITHOST=localhost:32...

renovate · 2026-02-11T01:10:33Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate bot added release-v0.7 renovate labels Aug 28, 2025

renovate bot enabled auto-merge August 28, 2025 11:58

renovate bot added renovate release-v0.7 labels Aug 28, 2025

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from bdf05fd to 1ad5e36 Compare August 28, 2025 13:20

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch 2 times, most recently from bf6e38f to 004c4bc Compare September 11, 2025 09:17

renovate bot changed the title ~~Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7)~~ Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) - abandoned Sep 25, 2025

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from 004c4bc to 1104486 Compare October 1, 2025 08:56

renovate bot changed the title ~~Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) - abandoned~~ Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) Oct 1, 2025

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from 1104486 to adf74f9 Compare October 1, 2025 13:27

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from adf74f9 to 1e266a4 Compare October 8, 2025 15:21

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from 1e266a4 to d34ce03 Compare November 12, 2025 20:42

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from d34ce03 to 765ae96 Compare December 9, 2025 15:51

github-actions bot added the size: L label Dec 9, 2025

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch 4 times, most recently from f69826c to 0babe13 Compare December 18, 2025 15:23

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from 0babe13 to 5781a27 Compare January 17, 2026 05:53

github-actions bot added size: XS and removed size: L labels Jan 17, 2026

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch 2 times, most recently from 3e8b5bb to 7807359 Compare February 2, 2026 14:00

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from 7807359 to 199ec1a Compare February 9, 2026 21:19

Update module github.com/tektoncd/pipeline to v0.70.0

8da62d8

renovate bot force-pushed the renovate/release-v0.7-tektoncd-pipelines branch from 199ec1a to 8da62d8 Compare February 10, 2026 11:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) #2858

Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) #2858

renovate bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

renovate bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

codecov bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

renovate bot commented Sep 25, 2025

Uh oh!

renovate bot commented Dec 12, 2025 •

edited

Loading

Uh oh!

qodo-code-review bot commented Feb 10, 2026

Uh oh!

renovate bot commented Feb 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) #2858

Are you sure you want to change the base?

Update module github.com/tektoncd/pipeline to v0.70.0 (release-v0.7) #2858

Conversation

renovate bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.70.0: Tekton Pipeline release v0.70.0 "Norwegian Forest Cat Number Five (Aaron Doral)"

🎉 OpenAPI schema to Tekton CRDs 🎉

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

v0.69.1: Tekton Pipeline release v0.69.1 "Oriental Longhair Omnibot"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

v0.69.0: Tekton Pipeline release v0.69.0 "Oriental Longhair Omnibot"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

v0.68.1: Tekton Pipeline release v0.68.1 "LaPerm Giskard Reventlov" LTS

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

v0.68.0: Tekton Pipeline release v0.68.0 "LaPerm Giskard Reventlov" LTS

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Configuration

Uh oh!

renovate bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: acceptance/go.mod

File name: go.mod

Uh oh!

codecov bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

renovate bot commented Sep 25, 2025

Autoclosing Skipped

Uh oh!

renovate bot commented Dec 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: acceptance/go.mod

File name: go.mod

Uh oh!

qodo-code-review bot commented Feb 10, 2026

CI Feedback 🧐

Uh oh!

renovate bot commented Feb 11, 2026

Edited/Blocked Notification

Uh oh!

renovate bot commented Aug 28, 2025 •

edited

Loading

`v0.70.0`: Tekton Pipeline release v0.70.0 "Norwegian Forest Cat Number Five (Aaron Doral)"

`v0.69.1`: Tekton Pipeline release v0.69.1 "Oriental Longhair Omnibot"

`v0.69.0`: Tekton Pipeline release v0.69.0 "Oriental Longhair Omnibot"

`v0.68.1`: Tekton Pipeline release v0.68.1 "LaPerm Giskard Reventlov" LTS

`v0.68.0`: Tekton Pipeline release v0.68.0 "LaPerm Giskard Reventlov" LTS

renovate bot commented Aug 28, 2025 •

edited

Loading

codecov bot commented Aug 28, 2025 •

edited

Loading

renovate bot commented Dec 12, 2025 •

edited

Loading