giovannino/forgejo-mcp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
forgejo-mcp/.tekton/release-tools/tasks
History
Exact
Christoph Görn 748de5102d
 fix: 🐛 push image version tag directly, never delete a staging tag 
On Forgejo/Codeberg the container registry deletes the underlying
MANIFEST when any of its tags is deleted. promote-image-tag's
`skopeo delete :build-tmp` cleanup therefore wiped the :vX.Y.Z and
:latest tags that shared the same digest — only the separate cosign
.sig/.att manifests survived. This silently broke the v2.27.0 image
publish (first release to run the delete step added in f026f8c).

Fix (shared by the forgejo-mcp and release-tools publish pipelines):
- push-image-by-digest pushes :vX.Y.Z directly (new TAG param); no
  :build-tmp staging tag is ever created.
- promote-image-tag only ADDS :latest (stable releases); it no longer
  copies :vX.Y.Z or deletes any tag.
- new delete-tag-on-failure task runs in `finally`, gated on
  attach-sbom not succeeding, to remove the briefly-unsigned :vX.Y.Z
  so the fail-closed "never advertise unsigned" guarantee is kept.

Both PipelineRuns validated with `oc create --dry-run=server`.

Refs: forgejo-mcp-9r4
2026-06-02 17:37:45 +02:00
..
build-image.yaml fix: 🐛 avoid SIGPIPE (exit 141) capturing buildah image id 2026-06-01 11:15:09 +02:00
cosign-attach-sbom.yaml fix: 🔒️ sign SBOM via cosign attest (replace deprecated attach sbom) 2026-06-02 08:00:08 +02:00
cosign-sign-image-by-digest.yaml fix: 🔒️ resolve goern push token for cosign in image sign + SBOM tasks 2026-06-01 10:57:11 +02:00
delete-tag-on-failure.yaml fix: 🐛 push image version tag directly, never delete a staging tag 2026-06-02 17:37:45 +02:00
promote-image-tag.yaml fix: 🐛 push image version tag directly, never delete a staging tag 2026-06-02 17:37:45 +02:00
push-image-by-digest.yaml fix: 🐛 push image version tag directly, never delete a staging tag 2026-06-02 17:37:45 +02:00
resolve-release-tools-tag.yaml feat(ci): 🚀 add release-tools image build + publish Tekton pipelines (iteration 2) 2026-05-25 18:53:49 +02:00
syft-scan-image.yaml fix: 🔒️ address automated code review findings from PR #157 2026-05-25 23:11:33 +02:00
verify-image-tools.yaml feat(ci): 🚀 add release-tools image build + publish Tekton pipelines (iteration 2) 2026-05-25 18:53:49 +02:00