Skip to content

fix: disable hermetic builds for conforma cli-stacks v1.4#787

Open
tommyd450 wants to merge 1 commit into
release-1.4from
disable-hermetic-conforma-cli-stacks-1.4
Open

fix: disable hermetic builds for conforma cli-stacks v1.4#787
tommyd450 wants to merge 1 commit into
release-1.4from
disable-hermetic-conforma-cli-stacks-1.4

Conversation

@tommyd450

Copy link
Copy Markdown

Summary

  • Disable hermetic builds in conforma cli-stack Tekton pipelines for release-1.4
  • Allows network access during builds for dependency resolution
  • Aligns conforma configuration with cosign cli-stack (which already has hermetic: false)

Changes

  • Set hermetic: "false" in .tekton/conforma-cli-stack-pull-request.yaml
  • Set hermetic: "false" in .tekton/conforma-cli-stack-push.yaml

Reason

Hermetic builds were preventing the conforma cli-stack pipelines from accessing network resources needed for dependency resolution. This aligns conforma with:

  • The cosign cli-stack configuration (already has hermetic: false)
  • Other cli-stacks components (rekor, trillian, tough, timestamp-authority, gitsign)

Test plan

  • Verify PR pipeline triggers and builds successfully
  • Verify push pipeline builds after merge
  • Confirm cli-stack image is published to quay.io/securesign/conforma-cli-stack

🤖 Generated with Claude Code

Disable hermetic builds in conforma cli-stack Tekton pipelines
to allow network access during builds for dependency resolution.

- Set hermetic: "false" in conforma-cli-stack-pull-request.yaml
- Set hermetic: "false" in conforma-cli-stack-push.yaml

Note: cosign-cli-stack already has hermetic: "false" - this change
aligns conforma with the same configuration.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
@tommyd450
tommyd450 force-pushed the disable-hermetic-conforma-cli-stacks-1.4 branch from 0f9ca0b to ecb2092 Compare June 29, 2026 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants