Merge pull request #15 from redhat-gpte-devopsautomation/master

Update

Author: treddy08

scaffolder-templates/gitlab/coolstore/catalog-spring-boot/manifests/helm/build/templates/task-verify-commit.yaml

@@ -29,10 +29,13 @@ spec:
   - image: alpine/git:latest
     name: git-verify
     script: |
-      apk add rpm cosign
-      rm -f gitsign_0.7.1_linux_amd64.rpm
-      wget -q https://github.com/sigstore/gitsign/releases/download/v0.7.1/gitsign_0.7.1_linux_amd64.rpm
-      rpm -ivh gitsign_0.7.1_linux_amd64.rpm
+      apk add rpm
+      wget "https://github.com/sigstore/cosign/releases/download/v2.4.1/cosign-linux-amd64"
+      mv cosign-linux-amd64 /usr/local/bin/cosign
+      chmod +x /usr/local/bin/cosign
+      rm -f gitsign_0.11.0_linux_amd64.rpm
+      wget -q https://github.com/sigstore/gitsign/releases/download/v0.11.0/gitsign_0.11.0_linux_amd64.rpm
+      rpm -ivh gitsign_0.11.0_linux_amd64.rpm
       git config --global --add safe.directory /workspace/repository
       cosign initialize --mirror=$(params.tuf-mirror) --root=$(params.tuf-mirror)/root.json
       git show -s

scaffolder-templates/gitlab/coolstore/gateway-vertx/manifests/helm/build/templates/task-verify-commit.yaml

@@ -29,10 +29,13 @@ spec:
   - image: alpine/git:latest
     name: git-verify
     script: |
-      apk add rpm cosign
-      rm -f gitsign_0.7.1_linux_amd64.rpm
-      wget -q https://github.com/sigstore/gitsign/releases/download/v0.7.1/gitsign_0.7.1_linux_amd64.rpm
-      rpm -ivh gitsign_0.7.1_linux_amd64.rpm
+      apk add rpm
+      wget "https://github.com/sigstore/cosign/releases/download/v2.4.1/cosign-linux-amd64"
+      mv cosign-linux-amd64 /usr/local/bin/cosign
+      chmod +x /usr/local/bin/cosign
+      rm -f gitsign_0.11.0_linux_amd64.rpm
+      wget -q https://github.com/sigstore/gitsign/releases/download/v0.11.0/gitsign_0.11.0_linux_amd64.rpm
+      rpm -ivh gitsign_0.11.0_linux_amd64.rpm
       git config --global --add safe.directory /workspace/repository
       cosign initialize --mirror=$(params.tuf-mirror) --root=$(params.tuf-mirror)/root.json
       git show -s

scaffolder-templates/gitlab/coolstore/inventory-quarkus/manifests/helm/build/templates/task-verify-commit.yaml

@@ -29,10 +29,13 @@ spec:
   - image: alpine/git:latest
     name: git-verify
     script: |
-      apk add rpm cosign
-      rm -f gitsign_0.7.1_linux_amd64.rpm
-      wget -q https://github.com/sigstore/gitsign/releases/download/v0.7.1/gitsign_0.7.1_linux_amd64.rpm
-      rpm -ivh gitsign_0.7.1_linux_amd64.rpm
+      apk add rpm
+      wget "https://github.com/sigstore/cosign/releases/download/v2.4.1/cosign-linux-amd64"
+      mv cosign-linux-amd64 /usr/local/bin/cosign
+      chmod +x /usr/local/bin/cosign
+      rm -f gitsign_0.11.0_linux_amd64.rpm
+      wget -q https://github.com/sigstore/gitsign/releases/download/v0.11.0/gitsign_0.11.0_linux_amd64.rpm
+      rpm -ivh gitsign_0.11.0_linux_amd64.rpm
       git config --global --add safe.directory /workspace/repository
       cosign initialize --mirror=$(params.tuf-mirror) --root=$(params.tuf-mirror)/root.json
       git show -s

scaffolder-templates/gitlab/coolstore/web-nodejs/manifests/helm/build/templates/task-verify-commit.yaml

@@ -29,10 +29,13 @@ spec:
   - image: alpine/git:latest
     name: git-verify
     script: |
-      apk add rpm cosign
-      rm -f gitsign_0.7.1_linux_amd64.rpm
-      wget -q https://github.com/sigstore/gitsign/releases/download/v0.7.1/gitsign_0.7.1_linux_amd64.rpm
-      rpm -ivh gitsign_0.7.1_linux_amd64.rpm
+      apk add rpm
+      wget "https://github.com/sigstore/cosign/releases/download/v2.4.1/cosign-linux-amd64"
+      mv cosign-linux-amd64 /usr/local/bin/cosign
+      chmod +x /usr/local/bin/cosign
+      rm -f gitsign_0.11.0_linux_amd64.rpm
+      wget -q https://github.com/sigstore/gitsign/releases/download/v0.11.0/gitsign_0.11.0_linux_amd64.rpm
+      rpm -ivh gitsign_0.11.0_linux_amd64.rpm
       git config --global --add safe.directory /workspace/repository
       cosign initialize --mirror=$(params.tuf-mirror) --root=$(params.tuf-mirror)/root.json
       git show -s

scaffolder-templates/gitlab/quinoa-wind-turbine/manifests/helm/build/templates/task-verify-commit.yaml

@@ -29,10 +29,13 @@ spec:
   - image: alpine/git:latest
     name: git-verify
     script: |
-      apk add rpm cosign
-      rm -f gitsign_0.7.1_linux_amd64.rpm
-      wget -q https://github.com/sigstore/gitsign/releases/download/v0.7.1/gitsign_0.7.1_linux_amd64.rpm
-      rpm -ivh gitsign_0.7.1_linux_amd64.rpm
+      apk add rpm
+      wget "https://github.com/sigstore/cosign/releases/download/v2.4.1/cosign-linux-amd64"
+      mv cosign-linux-amd64 /usr/local/bin/cosign
+      chmod +x /usr/local/bin/cosign
+      rm -f gitsign_0.11.0_linux_amd64.rpm
+      wget -q https://github.com/sigstore/gitsign/releases/download/v0.11.0/gitsign_0.11.0_linux_amd64.rpm
+      rpm -ivh gitsign_0.11.0_linux_amd64.rpm
       git config --global --add safe.directory /workspace/repository
       cosign initialize --mirror=$(params.tuf-mirror) --root=$(params.tuf-mirror)/root.json
       git show -s

scaffolder-templates/gitlab/quinoa-wind-turbine/skeleton/.gitignore

@@ -32,4 +32,4 @@ package*
 node_modules
 .firebaserc
 .firebase
-
+.quinoa