fix: 🐛 move release-tools PipelineRuns to .tekton/ root #160
No reviewers
Labels
No labels
Compat/Breaking
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/OpenSpec
Kind/Security
Kind/Testing
Priority/Critical
Priority/High
Priority/Low
Priority/Medium
RFC - Request For Comments
Reviewed/Confirmed
Reviewed/Duplicate
Reviewed/Invalid
Reviewed/Won't Fix
Status/Abandoned
Status/Blocked
Status/Need More Info
hermes-attempted
hermes-needs-clarification
hermes-ready
hermes-review
hermes-wip
human-required
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
agentic-forges/forgejo-mcp!160
Loading…
Reference in a new issue
No description provided.
Delete branch "refs/pull/160/head"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Problem
PaC v0.42.0 only scans
*.yamlfiles in the.tekton/root directory — subdirectories are not scanned. Both release-tools PipelineRun definitions lived in.tekton/release-tools/and were therefore invisible to PaC. No PipelineRun was ever created forrelease-tools/v*tag pushes or release-tools PRs.Diagnosed by: pushing
release-tools/v1.0.1tag, observing PaC controller logs show only 3 root-level PipelineRuns evaluated,release-tools-on-tag-publishnever appears.Also fixed on Codeberg: repo webhook was missing the
createevent type — tag pushes were never delivered. Addedcreateto the webhook event subscription.Fix
Move PipelineRun definitions to
.tekton/root withrelease-tools-prefix:.tekton/release-tools/on-tag-publish.yaml→.tekton/release-tools-on-tag-publish.yaml.tekton/release-tools/on-pull-request-build.yaml→.tekton/release-tools-on-pull-request-build.yamlTask definitions in
.tekton/release-tools/tasks/are unaffected — PaC fetches them by explicit path viapipelinesascode.tekton.dev/taskannotation.Post-merge
After merging: delete and re-push
release-tools/v1.0.1tag to trigger the publish pipeline.Closes forgejo-mcp-8sz
CEL expression evaluation error: expression "event == \"pull_request\" && target_branch == \"main\" &&\nfiles.any.exists(p, p.matches(\"^(image/release-tools/|\\\\.tekton/release-tools/).*\"))\n" failed to evaluate: no such key: anyop1st Pipelines as Code/on-pull-request-km6hk is running.
Starting Pipelinerun on-pull-request-km6hk in namespace op1st-pipelines
You can monitor the execution using the op1st Pipelines as Code PipelineRun viewer or through the command line by
using the tkn CLI with the following command:
tkn pr logs -n op1st-pipelines on-pull-request-km6hk -fop1st Pipelines as Code/code-scans- has failed.
There was an error creating the PipelineRun: code-scans-
cannot use the API on the provider platform to create a in_progress status:
op1st Pipelines as Code/on-pull-request-km6hk has successfully validated your commit.
Task Statuses:
fetch-source
build-and-test
op1st Pipelines as Code/on-pull-request-bx2n9 is running.
Starting Pipelinerun on-pull-request-bx2n9 in namespace op1st-pipelines
You can monitor the execution using the op1st Pipelines as Code PipelineRun viewer or through the command line by
using the tkn CLI with the following command:
tkn pr logs -n op1st-pipelines on-pull-request-bx2n9 -fop1st Pipelines as Code/code-scans-4njjt is running.
Starting Pipelinerun code-scans-4njjt in namespace op1st-pipelines
You can monitor the execution using the op1st Pipelines as Code PipelineRun viewer or through the command line by
using the tkn CLI with the following command:
tkn pr logs -n op1st-pipelines code-scans-4njjt -fop1st Pipelines as Code/code-scans-4njjt has successfully validated your commit.
Task Statuses:
fetch-source
gitleaks-version
gitleaks
op1st Pipelines as Code/on-pull-request-bx2n9 has successfully validated your commit.
Task Statuses:
fetch-source
build-and-test