Merge pull request #254 from fontivan/sskeard/konflux-updates

Konflux build configuration updates

Author: openshift-merge-bot[bot]

.tekton/build-pipeline.yaml

@@ -53,6 +53,10 @@ spec:
       description: Skip the ecosystem preflight checks (bundles should skip)
       name: skip-preflight
       type: string
+    - default: "false"
+      description: Skip the sast coverity check
+      name: skip-sast-coverity
+      type: string
     - default: "false"
       description: Execute the build with network isolation
       name: hermetic
@@ -486,6 +490,10 @@ spec:
           operator: in
           values:
             - "false"
+        - input: $(params.skip-sast-coverity)
+          operator: in
+          values:
+            - "false"
         - input: $(tasks.coverity-availability-check.results.STATUS)
           operator: in
           values:
@@ -507,6 +515,10 @@ spec:
           operator: in
           values:
             - "false"
+        - input: $(params.skip-sast-coverity)
+          operator: in
+          values:
+            - "false"
     - name: sast-shell-check
       params:
         - name: image-digest

.tekton/recert-4-20-pull-request.yaml

@@ -60,9 +60,12 @@ spec:
       value: true
     - name: build-source-image
       value: "true"
+    - name: skip-sast-coverity
+      value: "true"
   pipelineRef:
     name: build-pipeline
-  taskRunTemplate: {}
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-recert-4-20
   workspaces:
     - name: git-auth
       secret:

.tekton/recert-4-20-push.yaml

@@ -58,9 +58,12 @@ spec:
       value: true
     - name: build-source-image
       value: "true"
+    - name: skip-sast-coverity
+      value: "true"
   pipelineRef:
     name: build-pipeline
-  taskRunTemplate: {}
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-recert-4-20
   workspaces:
     - name: git-auth
       secret: