Pin ubi9 tag for Scanner V2 fetch and switch determine tag to ubi9

stackrox · Dec 12, 2024 · 6921801 · 6921801
1 parent 06b5f92
commit 6921801
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/tasks/determine-image-tag-task.yaml b/tasks/determine-image-tag-task.yaml
@@ -31,7 +31,7 @@ spec:
     - use
     - $(params.SOURCE_ARTIFACT)=/var/workdir/source
   - name: determine-image-tag
-    image: registry.access.redhat.com/ubi8:latest
+    image: registry.access.redhat.com/ubi9:latest@sha256:1057dab827c782abcfb9bda0c3900c0966b5066e671d54976a7bcb3a2d1a5e53
     workingDir: /var/workdir/source
     script: |
       #!/usr/bin/env bash

diff --git a/tasks/fetch-scanner-v2-data-task.yaml b/tasks/fetch-scanner-v2-data-task.yaml
@@ -45,7 +45,7 @@ spec:
     - use
     - $(params.SOURCE_ARTIFACT)=/var/workdir/source
   - name: fetch-scanner-data
-    image: registry.access.redhat.com/ubi9:latest
+    image: registry.access.redhat.com/ubi9:latest@sha256:1057dab827c782abcfb9bda0c3900c0966b5066e671d54976a7bcb3a2d1a5e53
     # The only functioning way to pass array parameter that I found is through args array.
     # Array params have weird limitations, see https://github.com/tektoncd/pipeline/blob/main/docs/tasks.md#substituting-array-parameters
     # Attempts to pass this in other places result in webhook errors and pipeline not starting.