update-konflux-tasks

Update outdated Konflux Tekton task bundles in pipeline YAML files.

538|560|Updated Jan 18, 2021
One-click install
npx skills add https://github.com/openshift/hypershift --skill update-konflux-tasks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: update-konflux-tasks
Source: https://github.com/openshift/hypershift/tree/main/.claude/skills/update-konflux-tasks
Command: npx skills add https://github.com/openshift/hypershift --skill update-konflux-tasks

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml.

What problem does it solve?

Konflux Tekton pipeline definitions pin task bundles to specific versions and SHA256 digests that become outdated over time, and manually tracking new versions, mapping digests to tags, and checking migration notes across many pipeline files is tedious and error-prone.

Core Features & Use Cases

  • Outdated Task Detection: Parse enterprise contract verification logs for outdated task warnings, or automatically detect updates using the update_trusted_task_bundles.py script with JSON output.
  • Digest-to-Version Mapping: Use skopeo to map SHA256 digests to clean semantic version tags and check migration documentation for breaking changes before version bumps.
  • Bulk Pipeline Updates: Update all Tekton pipeline YAML files under .tekton/ with the latest task versions and produce a summary of version bumps, digest updates, and required manual steps.
  • Use Case: After a Konflux enterprise contract verification run flags outdated tasks, point the skill at the verification log to update every pipeline file and confirm whether any migration steps are required.

Quick Start

Update all outdated Konflux Tekton tasks in the .tekton pipeline files using the enterprise contract verification log at ../../hypershift-operator-enterprise-contract-lxgvw-verify.log.

Frequently Asked Questions about update-konflux-tasks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I update outdated Konflux Tekton tasks in pipeline files?

Run the skill with an enterprise contract verification log path, or with no arguments to auto-detect updates via update_trusted_task_bundles.py. It parses outdated task warnings, maps digests to version tags with skopeo, and rewrites all .tekton YAML files.

How to find the version tag for a Tekton task digest?

The helper script find_task_version_by_digest.sh uses skopeo list-tags and skopeo inspect to match a SHA256 digest to a clean semantic version tag, filtering out commit-hash style tags.

Does the skill check migration notes before version bumps?

Yes. For version bumps it fetches MIGRATION.md from the konflux-ci/build-definitions repository, runs any referenced migration script on the pipeline files, and prompts the user when manual steps are required.

What tools are required to update Konflux task bundles?

You need skopeo for container image inspection, jq for JSON parsing, yq for YAML processing, and the PyYAML Python package when running without a log file. Internet access is required to inspect images and fetch migration notes.

What happens if no outdated Tekton tasks are found?

The skill reports success with no changes needed. It does not modify any pipeline files when all task bundles are already at their latest versions and digests.