From fd7cf122ce1e27889c6b5f4e84a95e46306c5c95 Mon Sep 17 00:00:00 2001 From: Sachin Sampras M Date: Fri, 7 Aug 2026 13:49:18 +0100 Subject: [PATCH 1/2] build: enable hermetic builds for cli-stack Signed-off-by: Sachin Sampras M --- .tekton/model-transparency-cli-stack-main-pull-request.yaml | 2 +- .tekton/model-transparency-cli-stack-main-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/model-transparency-cli-stack-main-pull-request.yaml b/.tekton/model-transparency-cli-stack-main-pull-request.yaml index 97a53b5..a4ac6fa 100644 --- a/.tekton/model-transparency-cli-stack-main-pull-request.yaml +++ b/.tekton/model-transparency-cli-stack-main-pull-request.yaml @@ -33,7 +33,7 @@ spec: - name: revision value: '{{revision}}' - name: hermetic - value: "false" + value: "true" - name: build-source-image value: "true" - name: ALLOW_CROSS_PLATFORM_IMAGES diff --git a/.tekton/model-transparency-cli-stack-main-push.yaml b/.tekton/model-transparency-cli-stack-main-push.yaml index aa933b0..bf9bbe4 100644 --- a/.tekton/model-transparency-cli-stack-main-push.yaml +++ b/.tekton/model-transparency-cli-stack-main-push.yaml @@ -32,7 +32,7 @@ spec: - name: prefetch-input value: '{"type": "gomod", "path": "."}' - name: hermetic - value: "false" + value: "true" - name: build-source-image value: "true" - name: ALLOW_CROSS_PLATFORM_IMAGES From 3005545f4d6d16c41844841d6285ecdf288674a1 Mon Sep 17 00:00:00 2001 From: Sachin Sampras M Date: Fri, 7 Aug 2026 13:55:44 +0100 Subject: [PATCH 2/2] build: add prefetch-input to cli-stack PR pipeline The PR pipeline was missing the cachi2 gomod prefetch config, causing hermetic builds to fail on go mod download. Signed-off-by: Sachin Sampras M --- .tekton/model-transparency-cli-stack-main-pull-request.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.tekton/model-transparency-cli-stack-main-pull-request.yaml b/.tekton/model-transparency-cli-stack-main-pull-request.yaml index a4ac6fa..76303e7 100644 --- a/.tekton/model-transparency-cli-stack-main-pull-request.yaml +++ b/.tekton/model-transparency-cli-stack-main-pull-request.yaml @@ -32,6 +32,8 @@ spec: value: . - name: revision value: '{{revision}}' + - name: prefetch-input + value: '{"type": "gomod", "path": "."}' - name: hermetic value: "true" - name: build-source-image