Skip to content

NO-JIRA: ci(.tekton/): remove obsolete sbom-syft-generate step override - #4569

Merged
jiridanek merged 1 commit into
mainfrom
fix/sbom-syft-generate-odh-main
Sep 11, 2026
Merged

NO-JIRA: ci(.tekton/): remove obsolete sbom-syft-generate step override#4569
jiridanek merged 1 commit into
mainfrom
fix/sbom-syft-generate-odh-main

Conversation

@jiridanek

@jiridanek jiridanek commented Sep 11, 2026

Copy link
Copy Markdown
Member

Summary

Removes the obsolete sbom-syft-generate step override from the build-images
stepSpecs in the ODH Konflux PipelineRuns.

Buildah task v0.11.0 removed the sbom-syft-generate step (SBOM generation now runs
inside the build step). A stepSpecs entry referencing a removed step fails pipeline
validation with:

[User error] invalid StepOverride: No Step named sbom-syft-generate

The prepare-sboms and build overrides are retained (both steps still exist).
62 .tekton/ PipelineRun files changed (8 lines removed each).

Related

Testing

  • All 62 modified files still parse as valid YAML.
  • No sbom-syft-generate references remain in .tekton/.

Summary by CodeRabbit

  • Chores
    • Removed resource allocations for the software bill of materials generation step across image-build and workbench build pipelines.
    • Existing build-step resource settings and other pipeline configurations remain unchanged.

Buildah task v0.11.0 removed the `sbom-syft-generate` step; SBOM generation now
runs inside the `build` step. A `stepSpecs` override referencing a removed step
fails pipeline validation with:

    [User error] invalid StepOverride: No Step named sbom-syft-generate

Drop the stale `sbom-syft-generate` entry from the `build-images` `stepSpecs`.
The `prepare-sboms` and `build` overrides are kept (both steps still exist).
@openshift-ci
openshift-ci Bot requested review from ayush17 and ysok September 11, 2026 11:23
@github-actions github-actions Bot added the review-requested GitHub Bot creates notification on #pr-review-ai-ide-team slack channel label Sep 11, 2026
@openshift-ci openshift-ci Bot added the size/l label Sep 11, 2026
@coderabbitai

coderabbitai Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited), Repository UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 2cc6726c-8526-427d-becc-5f6bf8f082ce

📥 Commits

Reviewing files that changed from the base of the PR and between 5e4ecb5 and 53d6372.

📒 Files selected for processing (62)
  • .tekton/odh-base-image-cpu-py312-c9s-pull-request.yaml
  • .tekton/odh-base-image-cpu-py312-c9s-push.yaml
  • .tekton/odh-base-image-cuda-12-9-py312-c9s-pull-request.yaml
  • .tekton/odh-base-image-cuda-12-9-py312-c9s-push.yaml
  • .tekton/odh-base-image-cuda-13-0-py312-c9s-pull-request.yaml
  • .tekton/odh-base-image-cuda-13-0-py312-c9s-push.yaml
  • .tekton/odh-base-image-rocm-7-14-py312-c9s-pull-request.yaml
  • .tekton/odh-base-image-rocm-7-14-py312-c9s-push.yaml
  • .tekton/odh-pipeline-runtime-datascience-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-datascience-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-datascience-cpu-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-minimal-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-minimal-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-minimal-cpu-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-pytorch-cuda-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-ci-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-pytorch-rocm-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-cuda-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-rocm-py312-ubi9-push.yaml
  • .tekton/odh-workbench-codeserver-baseline-cpu-py312-c9s-ci-push.yaml
  • .tekton/odh-workbench-codeserver-baseline-cpu-py312-c9s-pull-request.yaml
  • .tekton/odh-workbench-codeserver-datascience-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-datascience-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-datascience-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-datascience-cpu-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-cpu-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-rocm-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-pytorch-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-llmcompressor-cuda-ci-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-pytorch-rocm-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-rocm-py312-ci-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-rocm-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-trustyai-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-trustyai-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-trustyai-cpu-py312-ubi9-push.yaml
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • opendatahub-io/kubeflow (manual)
  • opendatahub-io/opendatahub-operator (manual)
  • opendatahub-io/odh-dashboard (manual)
💤 Files with no reviewable changes (62)
  • .tekton/odh-workbench-jupyter-trustyai-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-minimal-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-datascience-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-rocm-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-minimal-cpu-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-rocm-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-cpu-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-datascience-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-base-image-rocm-7-14-py312-c9s-pull-request.yaml
  • .tekton/odh-base-image-cuda-12-9-py312-c9s-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-base-image-cuda-13-0-py312-c9s-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-trustyai-cpu-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-datascience-cpu-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-ubi9-push.yaml
  • .tekton/odh-base-image-cuda-13-0-py312-c9s-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-codeserver-baseline-cpu-py312-c9s-ci-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-datascience-cpu-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-codeserver-baseline-cpu-py312-c9s-pull-request.yaml
  • .tekton/odh-base-image-cuda-12-9-py312-c9s-pull-request.yaml
  • .tekton/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-base-image-cpu-py312-c9s-pull-request.yaml
  • .tekton/odh-pipeline-runtime-minimal-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-codeserver-datascience-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-pytorch-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-cuda-py312-ubi9-ci-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-llmcompressor-cuda-ci-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-pytorch-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-pytorch-rocm-py312-ubi9-push.yaml
  • .tekton/odh-base-image-rocm-7-14-py312-c9s-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-ci-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-cuda-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-pytorch-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-rocm-py312-ubi9-ci-push.yaml
  • .tekton/odh-base-image-cpu-py312-c9s-push.yaml
  • .tekton/odh-workbench-jupyter-trustyai-cpu-py312-ubi9-ci-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-rocm-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-minimal-rocm-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-pytorch-cuda-py312-ubi9-push.yaml
  • .tekton/odh-pipeline-runtime-tensorflow-rocm-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-minimal-cuda-py312-ubi9-pull-request.yaml
  • .tekton/odh-pipeline-runtime-datascience-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-rocm-py312-ci-push.yaml
  • .tekton/odh-workbench-jupyter-datascience-cpu-py312-ubi9-pull-request.yaml
  • .tekton/odh-workbench-jupyter-pytorch-cuda-py312-ubi9-push.yaml
  • .tekton/odh-workbench-jupyter-tensorflow-cuda-py312-ubi9-pull-request.yaml

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.


📝 Walkthrough

Walkthrough

The change removes sbom-syft-generate CPU and memory resource specifications from 57 Tekton PipelineRun configurations. The edits cover base image, runtime, and workbench pipelines. Other task and step resource configurations remain unchanged.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~12 minutes

Merge Risk: ⚪ Minimal · up to 53d63

The obsolete step overrides were removed without any remaining review findings.

🚥 Pre-merge checks | ✅ 11
✅ Passed checks (11 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes removal of the obsolete Tekton step override. It uses imperative mood, includes NO-JIRA, follows the preferred format, and has no trailing period.
Description check ✅ Passed The description clearly explains the obsolete step, the Buildah 0.11.0 cause, the validation failure, retained overrides, affected files, and testing performed. It does not reproduce the repository te…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Branch Prefix Policy ✅ Passed Base ref is main. The authoritative PR title is NO-JIRA: ci(.tekton/): remove obsolete sbom-syft-generate step override, which does not start with a branch prefix. The PR is authored by `jiridanek…
Contribution Quality And Spam Detection ✅ Passed The PR does not meet the failure threshold. The reviewed diff changes 62 .tekton/ files, adds no lines, and removes only the obsolete sbom-syft-generate resource override. The final tree has zero …
No Hardcoded Secrets ✅ Passed No hardcoded secret was introduced. The authoritative diff contains 62 modified .tekton/ files, 496 removed lines, and zero added content lines. Every removed block contains only the obsolete `sbom-…
No Weak Cryptography ✅ Passed PASS. The authoritative diff changes 62 .tekton/ YAML files with 0 additions and 496 deletions. Every deletion removes the sbom-syft-generate stepSpecs entry and its CPU/memory resource block. N…
No Injection Vectors ✅ Passed PASS. The review-scoped diff contains only 496 deletions across 62 .tekton/*.yaml files and no additions. Each deletion removes the sbom-syft-generate resource override. The patch adds no SQL inte…
No Privileged Containers ✅ Passed PASS. The authoritative PR diff changes 62 Tekton PipelineRun YAML files with 496 deletions and zero additions. The deleted blocks only remove sbom-syft-generate computeResources overrides. No cha…
No Sensitive Data In Logs ✅ Passed PASS. The authoritative diff contains 62 YAML modifications with 496 deletions and zero added content lines. Each change removes only the sbom-syft-generate computeResources override; no logging s…

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Superseded by newer run: https://github.com/opendatahub-io/notebooks/actions/runs/34593820556

CI status [antigravity]

Run: Build Notebooks (push) #345938133703/3 complete · 3 skipped
Last updated: 2026-09-11T11:24:09Z

No workbench image jobs ran; all matrix jobs were skipped.

@github-actions

github-actions Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

📋 Review Summary

This pull request correctly removes the obsolete sbom-syft-generate step override from all 62 .tekton/ PipelineRun YAML files, aligning them with Buildah v0.11.0 where SBOM generation is now handled directly inside the build step. All files have been cleanly updated and parsed successfully.

🔍 General Feedback

  • The changes successfully resolve potential pipeline validation failures caused by referencing removed Buildah step overrides.
  • All modifications follow a consistent and clean pattern across all target pipeline runtime and base image configurations.

I did not post inline review comments.

@github-actions

Copy link
Copy Markdown
Contributor

CI status [antigravity]

Run: Build Notebooks (pr) #345938205563/3 complete · 1 passed · 2 skipped
Last updated: 2026-09-11T11:24:39Z

No workbench image jobs ran; all matrix jobs were skipped.

@openshift-ci openshift-ci Bot added size/l and removed size/l labels Sep 11, 2026
@codecov-commenter

codecov-commenter commented Sep 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 49.27%. Comparing base (5e4ecb5) to head (53d6372).
✅ All tests successful. No failed tests found.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main    #4569   +/-   ##
=======================================
  Coverage   49.27%   49.27%           
=======================================
  Files          51       51           
  Lines        6583     6583           
  Branches     1103     1103           
=======================================
  Hits         3244     3244           
  Misses       3056     3056           
  Partials      283      283           
Flag Coverage Δ
go 73.77% <ø> (ø)
python 48.57% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5e4ecb5...53d6372. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@openshift-ci

openshift-ci Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: ide-developer
Once this PR has been reviewed and has the lgtm label, please assign daniellutz for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jiridanek
jiridanek merged commit 7ed998e into main Sep 11, 2026
63 of 68 checks passed
@jiridanek
jiridanek deleted the fix/sbom-syft-generate-odh-main branch September 11, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lgtm review-requested GitHub Bot creates notification on #pr-review-ai-ide-team slack channel size/l

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants