From 6b46f64db0c078ba7f9cc000d7c3fdb577c9d967 Mon Sep 17 00:00:00 2001 From: Taylor Madore Date: Wed, 21 May 2025 14:45:15 -0400 Subject: [PATCH] use hermeto permissive mode Hermeto added a new permissive mode in: https://github.com/hermetoproject/hermeto/commit/aaf0a0039e9483f9a3a173aae211da0908ffcc5c Use it by default to make go vendoring checks as permissive as Cachito used to be: https://github.com/hermetoproject/hermeto/commit/5a75c849ccb0cccb2a5d9153cb3e966234a77ede Signed-off-by: Taylor Madore --- tekton/tasks/binary-container-hermeto.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tekton/tasks/binary-container-hermeto.yaml b/tekton/tasks/binary-container-hermeto.yaml index 5d989d2bc..95c81a93d 100644 --- a/tekton/tasks/binary-container-hermeto.yaml +++ b/tekton/tasks/binary-container-hermeto.yaml @@ -157,7 +157,7 @@ spec: echo "Fetching dependencies using Hermeto options: $(cat "${HERMETO_PKG_OPT_PATH}")" - hermeto --log-level="$LOG_LEVEL" --config-file="${CONF_FILE}" fetch-deps \ + hermeto --log-level="$LOG_LEVEL" --config-file="${CONF_FILE}" --mode=permissive fetch-deps \ --source="${REMOTE_SOURCE_PATH}/app/" \ --output="${REMOTE_SOURCE_PATH}" \ --sbom-output-type=cyclonedx \