[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	digest	87e1451 → a77e614
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	digest	0c0cf90 → daa950c
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	tekton-bundle	digest	2ca404d → 612f539
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	digest	6406168 → 79d5b56
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	cc7d71d → 43604d0
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	tekton-bundle	digest	b3c05f2 → 590db5c
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	ba9c197 → e3f908c
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	digest	e670e56 → 6c63bc1
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	tekton-bundle	digest	e3521e7 → c6874d3
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	digest	4d2c2ed → 41ec2c6
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	3e9b994 → a094264
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	tekton-bundle	digest	dafbb41 → 71bd384

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 02:00 AM and 08:59 AM, only on Sunday (* 2-8 * * 0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: stackrox/stackrox-mcp
• Branch: main
• File: .coderabbit.yaml
• Commit: f0b934a
• Layers: Repository YAML (base), Central YAML (inherited), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Enterprise
• Run ID: c369a6b9-aac5-4e59-8369-753a43061b9c

Commits

Reviewing files that changed from the base of the PR and between f0b934a and 5d06db4.

Files selected for processing: 1

• .tekton/basic-component-pipeline.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

Summary

Summary by CodeRabbit

• Chores
  • Updated the components referenced by the automated build and release pipeline. Its task versions, configuration, and workflow remain unchanged.
• User impact
  • This maintenance update does not change app features, settings, or behavior. There are no new user-facing capabilities or changes to existing workflows in this release.

The pipeline updates the pinned bundle digests for 12 task references. Task names, versions, parameters, and pipeline wiring remain unchanged.

Changes: Pipeline bundle references

Layer / File(s)	Summary
Update task bundle digests .tekton/basic-component-pipeline.yaml	The pinned digests change for 12 task bundles. Task names and versions remain unchanged.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: janisz

Merge Risk: Minimal · up to 5d06d

The pipeline updates its pinned task bundles. No specific incompatibility has been identified, though bundle compatibility remains unverified.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies a dependency update to Konflux references, matching the digest changes in the pull request.
Description check		The description directly documents the 12 Konflux Tekton bundle digest updates and related automation settings.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

[codecov-commenter]

❌ 2 Tests Failed:

Tests completed	Failed	Passed	Skipped
386	2	384	12

View the full list of 2 ❄️ flaky test(s)

::policy 1

Flake rate in main: 100.00% (Passed 0 times, Failed 204 times)

Stack Traces | 0s run time

- test violation 1
- test violation 2
- test violation 3

::policy 4

Flake rate in main: 100.00% (Passed 0 times, Failed 204 times)

Stack Traces | 0s run time

- testing multiple alert violation messages 1
- testing multiple alert violation messages 2
- testing multiple alert violation messages 3

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[github-actions]

E2E Test Results

Commit: 5d06db4
Workflow Run: View Details
Artifacts: Download test results & logs

=== Evaluation Summary ===

  ✓ list-clusters (assertions: 3/3)
  ✓ cve-cluster-does-not-exist (assertions: 3/3)
  ✓ cve-clusters-general (assertions: 3/3)
  ✓ cve-cluster-list (assertions: 3/3)
  ✓ cve-detected-clusters (assertions: 3/3)
  ✓ cve-log4shell (assertions: 3/3)
  ✓ cve-detected-workloads (assertions: 3/3)
  ✓ cve-nonexistent (assertions: 3/3)
  ✓ rhsa-not-supported (assertions: 2/2)
  ✓ cve-multiple (assertions: 3/3)
  ✓ cve-cluster-does-exist (assertions: 3/3)

Tasks:      11/11 passed (100.00%)
Assertions: 32/32 passed (100.00%)
Tokens:     ~55099 (estimate - excludes system prompt & cache)
MCP schemas: ~12562 (included in token total)
Agent used tokens:
  Input:  13399 tokens
  Output: 22244 tokens
Judge used tokens:
  Input:  83504 tokens
  Output: 49250 tokens