Trivial definition of an image build in compliance with Enterprise Contract policy
The latest built image is available at quay.io/redhat-appstudio/ec-golden-image:latest.
The image is signed and attested by Tekton Chains. For verification, use the
in-cluster public key: k8s://openshift-pipelines/public-key.
Best use hack/rebuild.sh from ec-cli. To build manually create a PipelineRun based on pull-request.yaml.
Replace values wrapped in double curly brances, e.g. {{ revision }}, with the expected literal, e.g. main.