[master] Update Konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog)	ce89532 → cad04a0
quay.io/konflux-ci/tekton-catalog/task-fips-operator-bundle-check-oci-ta (source, changelog)	75e68fe → 8970351
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	3d48fa2 → 0eb4cfb
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog)	6f047f5 → c89a2bc
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	d83becb → ba3eff8
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog)	5500681 → 92552dd

---

Configuration

📅 Schedule: Branch creation - Between 05:00 AM and 11:59 PM, only on Saturday ( * 5-23 * * 6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 45514d39-e96b-4903-83fb-842f818b237c

📥 Commits

Reviewing files that changed from the base of the PR and between 13e7a27 and d43246b.

📒 Files selected for processing (4)

• .tekton/windows-machine-config-operator-bundle-release-4-22-pull-request.yaml
• .tekton/windows-machine-config-operator-bundle-release-4-22-push.yaml
• .tekton/windows-machine-config-operator-release-4-22-pull-request.yaml
• .tekton/windows-machine-config-operator-release-4-22-push.yaml

---

📝 Walkthrough

Walkthrough

All four Tekton pipeline YAML files in the .tekton/ directory are updated to replace task bundle image digests with newer SHA256 hashes. The affected tasks include buildah-oci-ta, fips-operator-bundle-check-oci-ta, sast-snyk-check-oci-ta, sast-shell-check-oci-ta, sast-unicode-check-oci-ta, and rpms-signature-scan. Task names, version tags, parameters, control flow, and pipeline sequencing remain unchanged. Only the immutable digest pins are updated across pull-request and push pipeline variants.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Go Best Practices & Build Tags	✅ Passed	Pull request contains only YAML Tekton pipeline configurations with container image digest updates; no Go source code modifications present.
Security: Secrets, Ssh & Csr	✅ Passed	PR updates only Tekton task bundle image digests in pipeline configuration. No secrets exposed, proper templating used, no SSH or CSR logic modifications.
Kubernetes Controller Patterns	✅ Passed	PR modifies only Tekton/Konflux pipeline YAML files with digest updates; no Go controller code is affected, making the controller patterns check not applicable.
Windows Service Management	✅ Passed	Custom check for Windows service management is inapplicable; PR updates only Tekton CI/CD pipeline configuration files with container image digest hashes, not operator codebase.
Platform-Specific Requirements	✅ Passed	PR updates only Tekton task bundle digest references in CI/CD pipeline YAML files, not platform-specific operator runtime code for vSphere, AWS, Azure, or GCP.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/master

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[jrvaldes]

/retest

[jrvaldes]

/retest

[jrvaldes]

/retest

[openshift-ci]

@red-hat-konflux: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.