enable hermetic builds

additionally adding prefetch-input but commenting it out due to pre-fetch dependencies go 1.21 dependency
securesign · Nov 22, 2023 · f52a2e7 · f52a2e7
1 parent e0813f4
commit f52a2e7
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 0 deletions.
diff --git a/.tekton/backfill-redis-1-0-gamma-pull-request.yaml b/.tekton/backfill-redis-1-0-gamma-pull-request.yaml
@@ -30,6 +30,10 @@ spec:
     value: .
   - name: revision
     value: '{{revision}}'
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"path": ".","type": "gomod"}'
   pipelineSpec:
     finally:
     - name: show-sbom

diff --git a/.tekton/backfill-redis-1-0-gamma-push.yaml b/.tekton/backfill-redis-1-0-gamma-push.yaml
@@ -27,6 +27,10 @@ spec:
     value: .
   - name: revision
     value: '{{revision}}'
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"path": ".","type": "gomod"}'
   pipelineSpec:
     finally:
     - name: show-sbom

diff --git a/.tekton/rekor-server-1-0-gamma-pull-request.yaml b/.tekton/rekor-server-1-0-gamma-pull-request.yaml
@@ -30,6 +30,10 @@ spec:
     value: .
   - name: revision
     value: '{{revision}}'
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"path": ".","type": "gomod"}'
   pipelineSpec:
     finally:
     - name: show-sbom

diff --git a/.tekton/rekor-server-1-0-gamma-push.yaml b/.tekton/rekor-server-1-0-gamma-push.yaml
@@ -27,6 +27,10 @@ spec:
     value: .
   - name: revision
     value: '{{revision}}'
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"path": ".","type": "gomod"}'
   pipelineSpec:
     finally:
     - name: show-sbom