ROX-26094: variable blob location for Konflux

[tommartensen]

Idea:

• SCANNER_TAG is passed from determine-image-tag
• If it is not a tagged build, download data from latest
• Else use the SCANNER_TAG

Hints

• switched to full ubi because git didn't install properly: https://console.redhat.com/application-pipeline/workspaces/rh-acs/applications/acs/pipelineruns/scanner-build-vn9l9/logs (error: Error -1 running transaction)
• switched to ubi 9 (from 8), because newer curl required for --retry-all-errors flag
• The logic to determine if we're on a tagged commit follows the pattern implemented in the determine-image-tag task.

Validation:

• tagged build
  • GHA (produces dumps): https://github.com/stackrox/scanner/actions/runs/11813726639
  • Konflux (from 0.0.0-test.10): https://console.redhat.com/application-pipeline/workspaces/rh-acs/applications/acs/pipelineruns/scanner-on-push-wvgjg (logs gone)
• untagged build
  • Konflux: https://console.redhat.com/application-pipeline/workspaces/rh-acs/applications/acs/pipelineruns/scanner-on-push-9q5b9 (logs gone)
• abort double tagged build: https://console.redhat.com/application-pipeline/workspaces/rh-acs/applications/acs/pipelineruns/scanner-on-push-stz5w

New validation

• Tagged build:

  • PipelineRun
  • fetch-scanner-data log

• Untagged build:

  • PipelineRun
  • fetch-scanner-data log

TODO:

• remove 0.0.0-test.x tags

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[tommartensen]

/retest scanner-build

[openshift-ci]

@tommartensen: The /retest command does not accept any targets.
The following commands are available to trigger optional jobs:

• /test e2e-tests
• /test slim-e2e-tests

Use /test all to run all jobs.

In response to this:

/retest scanner-build

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[msugakov]

Cosmetic comments.

[openshift-ci]

@tommartensen: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/slim-e2e-tests	4f124a3	link	false	/test slim-e2e-tests
ci/prow/e2e-tests	4f124a3	link	false	/test e2e-tests

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[tommartensen]

/retest scanner-slim-on-push

[openshift-ci]

@tommartensen: The /retest command does not accept any targets.
The following commands are available to trigger optional jobs:

• /test e2e-tests
• /test slim-e2e-tests

Use /test all to run all jobs.

In response to this:

/retest scanner-slim-on-push

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.