ci: address review feedback on generate-tag.sh

- Remove unused IMAGE_URL parameter
- Normalize dates to UTC (TZ=UTC + --date=format-local)
- Remove silent error suppression (fail loud > wrong tag)
- Update pipeline task to match new script interface

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Victoremepunto

.tekton/pipelines/push.yaml

@@ -538,14 +538,55 @@ spec:
       operator: in
       values:
       - "false"
+  - name: generate-image-tag
+    params:
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskSpec:
+      params:
+      - name: SOURCE_ARTIFACT
+        type: string
+      results:
+      - name: VERSION_TAG
+        type: string
+      volumes:
+      - name: workdir
+        emptyDir: {}
+      steps:
+      - name: use-trusted-artifact
+        image: quay.io/konflux-ci/build-trusted-artifacts:latest@sha256:15d7dc86012e41b10d1eb37679ec03ee75c96436224fadd0938a49dc537aa4ad
+        args:
+        - use
+        - $(params.SOURCE_ARTIFACT)=/var/workdir/source
+        volumeMounts:
+        - mountPath: /var/workdir
+          name: workdir
+      - name: generate-tag
+        image: quay.io/konflux-ci/task-runner:1.4.1@sha256:d9feec6f2ce9b10cfb76b45ea14f83b5ed9f231de7d6083291550aebe8eb09ea
+        volumeMounts:
+        - mountPath: /var/workdir
+          name: workdir
+        script: |
+          #!/usr/bin/env bash
+          set -euo pipefail
+          VERSION_TAG=$(bash /var/workdir/source/scripts/generate-tag.sh /var/workdir/source)
+          echo -n "${VERSION_TAG}" > /tekton/results/VERSION_TAG
+          echo "Generated version tag: ${VERSION_TAG}"
   - name: apply-tags
     params:
     - name: IMAGE_URL
       value: $(tasks.build-image-index.results.IMAGE_URL)
     - name: IMAGE_DIGEST
       value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: ADDITIONAL_TAGS
+      value:
+      - $(tasks.generate-image-tag.results.VERSION_TAG)
+      - latest
     runAfter:
     - build-image-index
+    - generate-image-tag
     taskRef:
       params:
       - name: name

scripts/generate-tag.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+SOURCE_DIR="${1:-.}"
+MAJOR=1
+
+COMMIT_DATE=$(TZ=UTC git -C "${SOURCE_DIR}" log -1 --format="%ad" --date=format-local:"%Y%m%d" HEAD)
+# Count commits on the same day that are ancestors of HEAD (i.e., came before it).
+# This gives a deterministic, sequential build number from git history — no registry access needed.
+BUILD_NUM=$(TZ=UTC git -C "${SOURCE_DIR}" log HEAD^ --format="%ad" --date=format-local:"%Y%m%d" \
+  | grep -c "^${COMMIT_DATE}$")
+
+echo -n "${MAJOR}.${COMMIT_DATE}.${BUILD_NUM}"