🤖 [RHTAS-build-bot] [main] Update Component images

[JasonPowr]

This PR contains the following changes

Image	Old SHA	New SHA
registry.redhat.io/rhtas/rekor-search-ui-rhel9	2d5b39c	0ef67e1
registry.redhat.io/rhtas/fulcio-rhel9	2417087	c6f70c1
registry.redhat.io/rhtas/certificate-transparency-rhel9	c7c6f0f	ad9e4ff
registry.redhat.io/rhtas/createtree-rhel9	7132133	487f9df
registry.redhat.io/rhtas/client-server-rhel9	c81aaa8	b7a3348
registry.redhat.io/rhtas/timestamp-authority-rhel9	71a3899	7b3eb91
registry.redhat.io/rhtas/rekor-server-rhel9	405b309	da6bffd
registry.redhat.io/rhtas/trillian-logserver-rhel9	d5000a4	c600cd5
registry.redhat.io/rhtas/trillian-database-rhel9	0c9bb35	accd79b
registry.redhat.io/rhtas/rekor-backfill-redis-rhel9	aa83559	5bbf533
registry.redhat.io/rhtas/trillian-logsigner-rhel9	c95a757	57d81a3
registry.redhat.io/rhtas/tuffer-rhel9	0c30481	775909d
registry.redhat.io/rhtas/trillian-redis-rhel9	880b92a	d8bfcfb

---

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR refreshes the default SHA256 digests for all RHTAS component images in the tas_single_node role to align with the latest builds.

File-Level Changes

Change	Details	Files
Bump SHA256 digests for tas_single_node component images	Update fulcio-server image digest Update trillian-logserver image digest Update trillian-logsigner image digest Update rekor-server image digest Update certificate-transparency (CT log) image digest Update trillian-redis image digest Update rekor-backfill-redis image digest Update trillian-database image digest Update tuffer (TUF) image digest Update timestamp-authority image digest Update rekor-search-ui image digest Update createtree image digest Update client-server image digest	roles/tas_single_node/defaults/main.yml

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

Hey there - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[qodo-code-review]

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢	No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
⚪	Codebase context is not defined Follow the guide to enable codebase context checks.
Custom Compliance
🟢	Generic: Comprehensive Audit Trails Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance. Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Meaningful Naming and Self-Documenting Code Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Robust Error Handling and Edge Case Management Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Error Handling Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Logging Practices Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Security-First Input Validation and Data Handling Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
Update

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

[qodo-code-review]

PR Code Suggestions ✨

No code suggestions found for the PR.

[fghanmi]

@JasonPowr can we please avoid updating rekor-monitor until #399 is merged ?

[JasonPowr]

Hey @fghanmi, sure you can avoid updating rekor-monitor, you will need to remove the image from https://github.com/securesign/releases/blob/main/.github/workflows/update-component-images.yaml#L71, that will stop it getting updated, then revert this change, please also do this for the operator