What problem does it solve?
Konflux Tekton pipeline definitions pin task bundles to specific versions and SHA256 digests that become outdated over time, and manually tracking new versions, mapping digests to tags, and checking migration notes across many pipeline files is tedious and error-prone.
Core Features & Use Cases
- Outdated Task Detection: Parse enterprise contract verification logs for outdated task warnings, or automatically detect updates using the update_trusted_task_bundles.py script with JSON output.
- Digest-to-Version Mapping: Use skopeo to map SHA256 digests to clean semantic version tags and check migration documentation for breaking changes before version bumps.
- Bulk Pipeline Updates: Update all Tekton pipeline YAML files under .tekton/ with the latest task versions and produce a summary of version bumps, digest updates, and required manual steps.
- Use Case: After a Konflux enterprise contract verification run flags outdated tasks, point the skill at the verification log to update every pipeline file and confirm whether any migration steps are required.
Quick Start
Update all outdated Konflux Tekton tasks in the .tekton pipeline files using the enterprise contract verification log at ../../hypershift-operator-enterprise-contract-lxgvw-verify.log.