LCORE-1935: Fix the lightspeed-stack-0-6 Konflux component pipelines

[syedriko]

Description

Fix the image repo in the lightspeed-stack-0-6 Konflux component pipelines

Type of change

• Refactor
• New feature
• Bug fix
• CVE fix
• Optimization
• Documentation Update
• Configuration Update
• Bump-up service version
• Bump-up dependent library
• Bump-up library or tool used for development (does not change the final image)
• CI configuration change
• Konflux configuration change
• Unit tests improvement
• Integration tests improvement
• End to end tests improvement
• Benchmarks improvement

Tools used to create PR

Identify any AI code assistants used in this PR (for transparency and review context)

• Assisted-by: (e.g., Claude, CodeRabbit, Ollama, etc., N/A if not used)
• Generated by: (e.g., tool name and version; N/A if not used)

Related Tickets & Documents

• Related Issue # https://redhat.atlassian.net/browse/LCORE-1935
• Closes #

Checklist before requesting a review

• I have performed a self-review of my code.
• PR has passed all pre-merge test jobs.
• If it is a core feature, I have added thorough tests.

Testing

• Please provide detailed steps to perform tests related to this code change.
• How were the fix/results from this change verified? Please provide relevant screenshots or results.

Summary by CodeRabbit

• Chores
  • CI/CD pipeline now publishes images to an updated repository path and includes adjusted build defaults.
• New Features
  • Multi-architecture builds now include an additional ARM target; image build entrypoint updated.
  • Pipeline now adds an additional image tag based on commit shorthand.
• Security / Tests
  • Security scan workflow expanded with new Coverity checks and updated SAST tasks and arguments.
• Reliability
  • Pipeline and task timeouts set to 4 hours each.

[coderabbitai]

Walkthrough

This PR updates two Tekton pipeline YAMLs: restructures pipeline parameters/defaults and annotations; changes build/prefetch wiring and output-image/defaults; updates multiple task bundle references; adds Coverity SAST tasks and gates their execution; adjusts SAST task inputs/args; updates tag application and rpms scan bundles; and sets 4h timeouts.

Changes

Tekton pipeline configuration and SAST updates

Layer / File(s)	Summary
Pipeline metadata and parameter reshaping .tekton/lightspeed-stack-0-6-pull-request.yaml, .tekton/lightspeed-stack-0-6-push.yaml	Annotation formatting and many pipeline spec.params are reformatted/reordered or clarified (including path-context, dockerfile, image-expires-after, buildah-format, privileged-nested, enable-package-registry-proxy, sast-target-dirs) and the removed enable-cache-proxy wiring is handled.
Build/prefetch task wiring and image defaults .tekton/lightspeed-stack-0-6-pull-request.yaml, .tekton/lightspeed-stack-0-6-push.yaml	output-image defaults and build defaults (dockerfile, build-platforms) are updated; prefetch inputs expanded; prefetch-dependencies and buildah-remote-oci-ta task bundle references and parameter wiring are updated to include additional artifacts/platforms.
SAST task updates, Coverity addition, tag and rpms changes .tekton/lightspeed-stack-0-6-pull-request.yaml, .tekton/lightspeed-stack-0-6-push.yaml	SAST task bundle digests are updated; sast-snyk-check receives additional ARGS and source artifact inputs; new Coverity tasks (sast-coverity-check, coverity-availability-check) added with conditional gating; sast-unicode-check, sast-shell-check updates; apply-tags adds ADDITIONAL_TAGS with short commit; rpms-signature-scan bundle updated.
Pipeline and task timeout settings .tekton/lightspeed-stack-0-6-pull-request.yaml, .tekton/lightspeed-stack-0-6-push.yaml	Introduces timeouts section setting pipeline: 4h and tasks: 4h in both pipeline YAMLs.

🎯 4 (Complex) | ⏱️ ~45 minutes

Suggested labels: ok-to-test

Suggested reviewers:

• tisnik

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly identifies the main change: fixing the lightspeed-stack-0-6 Konflux component pipelines, which aligns with the core modifications to the two pipeline YAML files.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

✨ Simplify code

• Create PR with simplified code

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[tisnik]

LGTM