Enable hermetic builds

Signed-off-by: Dale Haiducek <[email protected]>

Author: dhaiducek

Diff for: .tekton/gatekeeper-3-17-pull-request.yaml

@@ -35,6 +35,8 @@ spec:
         - linux/s390x
     - name: path-context
       value: .
+    - name: hermetic
+      value: true
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
@@ -318,7 +320,7 @@ spec:
             - name: name
               value: deprecated-image-check
             - name: bundle
-              value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4@sha256:650330fde0773f73f6bac77ae573031c44c79165d9503b0d5ec1db3e6ef981d7
+              value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4@sha256:000dfcf3583649ca07214f308126a8ef0400358a9a9cbf876fe60c1cc6affb37
             - name: kind
               value: task
           resolver: bundles

Diff for: .tekton/gatekeeper-3-17-push.yaml

@@ -33,6 +33,8 @@ spec:
         - linux-mlarge/arm64
         - linux/ppc64le
         - linux/s390x
+    - name: hermetic
+      value: true
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
@@ -316,7 +318,7 @@ spec:
             - name: name
               value: deprecated-image-check
             - name: bundle
-              value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4@sha256:650330fde0773f73f6bac77ae573031c44c79165d9503b0d5ec1db3e6ef981d7
+              value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4@sha256:000dfcf3583649ca07214f308126a8ef0400358a9a9cbf876fe60c1cc6affb37
             - name: kind
               value: task
           resolver: bundles

Diff for: build/Dockerfile.rhtap

@@ -11,6 +11,10 @@ RUN go build -mod vendor -a -ldflags "${LDFLAGS}" -o manager
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
 WORKDIR /
 COPY --from=builder /go/src/github.com/open-policy-agent/gatekeeper/manager .
-RUN microdnf -y update && microdnf -y clean all
+
+RUN mkdir licenses/
+COPY LICENSE licenses/
+
 USER 65532:65532
+
 ENTRYPOINT ["/manager"]