Merge branch 'master' into maintenance-03-2025

Author: BraisVQ

CHANGELOG.md

@@ -4,10 +4,12 @@
 
 ### Added
 
-- Add packages carvel/imgpkg and yg ([#1322](https://github.com/opendevstack/ods-core/issues/1322))
+- Add packages carvel/imgpkg and yq ([#1322](https://github.com/opendevstack/ods-core/issues/1322))
 - Adde mask-passwords and office 365 connector plugins in Jenkins ([#1313](https://github.com/opendevstack/ods-core/issues/1313)) and ([#1316](https://github.com/opendevstack/ods-core/issues/1316))
+- Add package cosign ([#1323](https://github.com/opendevstack/ods-core/issues/1323))
 
 ### Changed
+- Updated Aqua CLI ([#1325](https://github.com/opendevstack/ods-core/pull/1325))
 
 ### Fixed
 

configuration-sample/ods-core.env.sample

@@ -250,8 +250,8 @@ JENKINS_AGENT_BASE_SNYK_DISTRIBUTION_URL=https://github.com/snyk/snyk/releases/d
 # Releases are published at https://download.aquasec.com/scanner
 # Check Aqua versions backward compatibility at https://docs.aquasec.com/docs/version-compatibility-of-components#section-backward-compatibility-across-two-major-versions
 # To Download the aquaSec scanner cli and check their documentaion requires a valid account on aquasec.com
-# Latest tested version is 2022.4.588
-# Example: https://<USER>:<PASSWORD>@download.aquasec.com/scanner/2022.4.588/scannercli
+# Latest tested version is 2022.4.720
+# Example: https://<USER>:<PASSWORD>@download.aquasec.com/scanner/2022.4.720/scannercli
 JENKINS_AGENT_BASE_AQUASEC_SCANNERCLI_URL=
 
 # Repository of shared library

jenkins/agent-base/Dockerfile.ubi8

@@ -4,6 +4,7 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 ENV SONAR_SCANNER_VERSION=7.0.2.4839 \
     CNES_REPORT_VERSION=5.0.1 \
+    COSIGN_VERSION=2.4.3 \
     TAILOR_VERSION=1.3.4 \
     SOPS_VERSION=3.9.4 \
     HELM_VERSION=3.17.1 \
@@ -63,6 +64,13 @@ RUN cd /tmp \
     && mv cnesreport.jar /usr/local/cnes/cnesreport.jar \
     && chmod 777 /usr/local/cnes/cnesreport.jar
 
+# Install sigstore/cosign
+RUN cd /tmp \
+    && curl -sSLO https://github.com/sigstore/cosign/releases/download/v${COSIGN_VERSION}/cosign-linux-amd64 \
+    && mv /tmp/cosign-linux-amd64 /usr/local/bin/cosign \
+    && chmod 755 /usr/local/bin/cosign \
+    && cosign version
+
 # Install Tailor.
 RUN cd /tmp \
     && curl -sSLO https://github.com/opendevstack/tailor/releases/download/v${TAILOR_VERSION}/tailor-linux-amd64 \