[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	digest	a77e614 → 6106621
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	digest	daa950c → 6c80911
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog)	tekton-bundle	digest	2c44f7f → c02e7ce
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	patch	0.3.4 → 0.3.6
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check (source, changelog)	tekton-bundle	digest	81b7cad → f86e420
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	43604d0 → 0b1783a
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	tekton-bundle	digest	590db5c → c3c1071
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	e3f908c → 67bea82
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	digest	6c63bc1 → 3839c84
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	tekton-bundle	digest	c6874d3 → d9d5ecd
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	minor	0.1.1 → 0.2
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	tekton-bundle	digest	71bd384 → 4bf27ae

---

Release Notes

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)

v0.3.6

Fixed

• Normalize Konflux node-pool suffixes in image-arch before selecting an OCI
  manifest. A scheduling label such as linux-m2xlarge/arm64 is treated as
  linux/arm64, so the scan matches the image manifest.

v0.3.5

Added

• Scan Linux, Windows, and macOS container images by retaining each manifest's
  OCI operating system and architecture during platform selection and layer
  extraction. The image-arch parameter now accepts full OCI platforms and
  recognizes mac, macos, and osx as aliases for darwin.

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-roxctl-scan)

v0.2

Added

• Added new result: ACS_RHSAS that contains found critical and important CVEs RHSAS
• Added new step: get-rhsas fetches all critical and important RHSAs from parsed roxctl-scan output and stores it in the result mentioned above

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Saturday (* * * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.37%. Comparing base (8e33f85) to head (a163478).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #527   +/-   ##
=======================================
  Coverage   93.37%   93.37%           
=======================================
  Files          57       57           
  Lines        4772     4772           
  Branches      300      300           
=======================================
  Hits         4456     4456           
  Misses        258      258           
  Partials       58       58           

Flag	Coverage Δ
unit-tests	93.37% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.