From a62b27cfc9be0d7ed01ebf473b9cad08a7a82b55 Mon Sep 17 00:00:00 2001
From: Simon Baird <sbaird@redhat.com>
Date: Thu, 6 Aug 2026 11:27:06 -0400
Subject: [PATCH 1/2] [DNM] Add roxctl-scan task to build pipeline

The goal is to see if we can produce a roxctl-scan report, which
will be useful to test and debug the Jira.

We probably don't want to merge this, just want to trigger a build
and take a look at the pipeline run and the artifacts created.

https://redhat.atlassian.net/browse/EC-2060

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .tekton/cli-main-pull-request.yaml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/.tekton/cli-main-pull-request.yaml b/.tekton/cli-main-pull-request.yaml
index e8c3de0a6..99091b006 100644
--- a/.tekton/cli-main-pull-request.yaml
+++ b/.tekton/cli-main-pull-request.yaml
@@ -579,6 +579,28 @@ spec:
         operator: in
         values:
         - "false"
+    - name: roxctl-scan
+      params:
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: roxctl-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-roxctl-scan:0.1@sha256:63614a21526f2b3e00d2e795be797b4db6fe124184a58e9c8b2e507addebe9fb
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
     workspaces:
     - name: git-auth
       optional: true

From 309936bbdacc97a460b5d7f047705613ec9fbf86 Mon Sep 17 00:00:00 2001
From: Simon Baird <sbaird@redhat.com>
Date: Thu, 6 Aug 2026 14:04:50 -0400
Subject: [PATCH 2/2] [DNM] Use git resolver for roxctl-scan task to test
 unmerged fixes

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .tekton/cli-main-pull-request.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.tekton/cli-main-pull-request.yaml b/.tekton/cli-main-pull-request.yaml
index 99091b006..3c91bb41b 100644
--- a/.tekton/cli-main-pull-request.yaml
+++ b/.tekton/cli-main-pull-request.yaml
@@ -589,13 +589,13 @@ spec:
       - build-image-index
       taskRef:
         params:
-        - name: name
-          value: roxctl-scan
-        - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-roxctl-scan:0.1@sha256:63614a21526f2b3e00d2e795be797b4db6fe124184a58e9c8b2e507addebe9fb
-        - name: kind
-          value: task
-        resolver: bundles
+        - name: url
+          value: https://github.com/cuipinghuo/konflux-test-tasks
+        - name: revision
+          value: stoneintg-1755-fix-roxctl-oci-attach
+        - name: pathInRepo
+          value: task/roxctl-scan/0.1/roxctl-scan.yaml
+        resolver: git
       when:
       - input: $(params.skip-checks)
         operator: in