Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion release/operator/konflux.Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ ENV GOEXPERIMENT=strictfipsruntime

RUN go build -tags strictfipsruntime -mod=readonly -ldflags "-s -w" -a -o lvms cmd/main.go

FROM --platform=$TARGETPLATFORM registry.redhat.io/ubi9/ubi-minimal@sha256:161a4e29ea482bab6048c2b36031b4f302ae81e4ff18b83e61785f40dc576f5d
FROM --platform=$TARGETPLATFORM registry.redhat.io/ubi9/ubi-minimal@sha256:69f5c9886ecb19b23e88275a5cd904c47dd982dfa370fbbd0c356d7b1047ef68
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | πŸ”΄ Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify the new image digest exists in the registry
skopeo inspect --no-tags docker://registry.redhat.io/ubi9/ubi-minimal@sha256:69f5c9886ecb19b23e88275a5cd904c47dd982dfa370fbbd0c356d7b1047ef68 2>/dev/null && echo "βœ“ Digest verified" || echo "βœ— Digest not found"

Repository: openshift/lvm-operator

Length of output: 84


Hold β€” new digest not found in registry.

The verification script indicates the updated digest does not exist in the registry. This will cause build failures. Verify the digest is correct or revert to a known-good version before merging.

πŸ€– Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@release/operator/konflux.Dockerfile` at line 23, The FROM instruction in
konflux.Dockerfile references a non-existent digest causing CI failures; verify
the sha256 value used in the FROM line (the
registry.redhat.io/ubi9/ubi-minimal@sha256:69f5c9886ecb19b23e88275a5cd904c47dd982dfa370fbbd0c356d7b1047ef68
entry) against the Red Hat registry and update it to the correct digest or
replace it with a known-good tag (e.g., a stable ubi9/ubi-minimal tag) so the
image can be pulled, then re-run the verification script to confirm the digest
exists before merging.


ARG MAINTAINER
ARG OPERATOR_VERSION
Expand Down