From 5c6dcead2a6915535879e0908df28a069c55b299 Mon Sep 17 00:00:00 2001
From: Antony Natale <anatale@redhat.com>
Date: Fri, 1 Nov 2024 14:37:51 -0400
Subject: [PATCH] adds newly required rpm scan tasks for konflux

---
 .tekton/inventory-api-pull-request.yaml | 17 +++++++++++++++++
 .tekton/inventory-api-push.yaml         | 17 +++++++++++++++++
 2 files changed, 34 insertions(+)

diff --git a/.tekton/inventory-api-pull-request.yaml b/.tekton/inventory-api-pull-request.yaml
index 2b666fcf..dc53455c 100644
--- a/.tekton/inventory-api-pull-request.yaml
+++ b/.tekton/inventory-api-pull-request.yaml
@@ -254,6 +254,23 @@ spec:
       workspaces:
       - name: source
         workspace: workspace
+    - name: rpms-signature-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-container.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-container.results.IMAGE_URL)
+      runAfter:
+      - build-container
+      taskRef:
+        params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:7aa4d3c95e2b963e82fdda392f7cb3d61e3dab035416cf4a3a34e43cf3c9c9b8
+        - name: kind
+          value: task
+        resolver: bundles
     - name: build-image-index
       params:
       - name: IMAGE
diff --git a/.tekton/inventory-api-push.yaml b/.tekton/inventory-api-push.yaml
index bef58508..0af78870 100644
--- a/.tekton/inventory-api-push.yaml
+++ b/.tekton/inventory-api-push.yaml
@@ -251,6 +251,23 @@ spec:
       workspaces:
       - name: source
         workspace: workspace
+    - name: rpms-signature-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-container.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-container.results.IMAGE_URL)
+      runAfter:
+      - build-container
+      taskRef:
+        params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:7aa4d3c95e2b963e82fdda392f7cb3d61e3dab035416cf4a3a34e43cf3c9c9b8
+        - name: kind
+          value: task
+        resolver: bundles
     - name: build-image-index
       params:
       - name: IMAGE