Skip to content

Add Containerfile.art for ART onboarding - #2500

Open
shruti-rh wants to merge 1 commit into
quay:mainfrom
shruti-rh:add-art-containerfile
Open

Add Containerfile.art for ART onboarding#2500
shruti-rh wants to merge 1 commit into
quay:mainfrom
shruti-rh:add-art-containerfile

Conversation

@shruti-rh

@shruti-rh shruti-rh commented Aug 19, 2026

Copy link
Copy Markdown

Summary

Adds ART-compatible Containerfile for building Clair container images through the Konflux pipeline for Red Hat OpenShift releases.

  • Adds contrib/Containerfile.art with Red Hat-specific labels and metadata
  • Updates CODEOWNERS to assign contrib/Containerfile.art to @quay/redhat-team

Changes

contrib/Containerfile.art — Multi-stage Dockerfile for ART builds:

  • Build stage: Go 1.25 toolset, builds with FIPS-compliant flags
  • Runtime stage: UBI 9 minimal base with Red Hat labels
  • Includes required data files for Clair vulnerability scanning

CODEOWNERS — Adds entry for contrib/Containerfile.art maintenance

Tracking

ART-19361: Quay onboarding to ART pipeline

@shruti-rh
shruti-rh requested review from a team as code owners August 19, 2026 08:09
@shruti-rh
shruti-rh requested a review from hdonnay August 19, 2026 08:09
@shruti-rh
shruti-rh force-pushed the add-art-containerfile branch 2 times, most recently from 46c02c4 to 53a4b9d Compare August 19, 2026 08:18

@hdonnay hdonnay left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needs the CI fixed.

The Containerfile should be in its own directory under contrib, like contrib/art.
The JSON files are not suitable for inclusion in the repository; the Containerfile should probably use ADD from the actual URL where the data is hosted.

@shruti-rh
shruti-rh force-pushed the add-art-containerfile branch from 53a4b9d to 48e1d33 Compare August 20, 2026 06:18
@shruti-rh
shruti-rh requested a review from hdonnay August 20, 2026 06:35

@hdonnay hdonnay left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • remove .dockerignore changes
  • fix CODEOWNERS error
  • address CI issues

Comment thread .dockerignore
Comment thread CODEOWNERS

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is reporting an error.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

where can I find the error this is reporting?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Go to the file in the "Files changed" tab: https://github.com/quay/clair/pull/2500/changes

Here's what I'm seeing:
Image

@shruti-rh
shruti-rh force-pushed the add-art-containerfile branch from 48e1d33 to f778f35 Compare August 21, 2026 06:54
Adds contrib/art/Containerfile.art with ART-compatible labels for building
Clair container images through the Konflux pipeline for Red Hat OpenShift releases.

Uses ADD to fetch JSON data files from quay-konflux-components repository,
allowing hermetic builds without including data files in the clair repository.

Tracking: ART-19361

Signed-off-by: Shruti Anekar <sanekar@redhat.com>
@shruti-rh
shruti-rh force-pushed the add-art-containerfile branch from f778f35 to ef3f243 Compare August 21, 2026 07:30
Comment thread CODEOWNERS
@@ -1 +1,2 @@
* @quay/clair @quay/clair-maintainers
contrib/art/Containerfile.art @openshift-eng/automated-release-tooling

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
contrib/art/Containerfile.art @openshift-eng/automated-release-tooling
contrib/art/Containerfile.art @quay/automated-release-tooling

@shruti-rh we will likely need to make this a Quay team with the ART members.. I don't think GH has cross-org teams

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants