From fbb1e8da5ececb9a08800eddec7ff3c559a268b8 Mon Sep 17 00:00:00 2001
From: Vickey Brown <vibrown@redhat.com>
Date: Fri, 4 Sep 2026 14:04:44 -0500
Subject: [PATCH] Migrate from clair-scan to roxctl-scan

---
 .tekton/fact-component-pipeline.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/.tekton/fact-component-pipeline.yaml b/.tekton/fact-component-pipeline.yaml
index 89e740c9..e43479cf 100644
--- a/.tekton/fact-component-pipeline.yaml
+++ b/.tekton/fact-component-pipeline.yaml
@@ -395,6 +395,25 @@ spec:
     - input: $(params.skip-checks)
       operator: in
       values: ["false"]
+  - name: clair-scan
+    params:
+    - name: image-digest
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    taskRef:
+      params:
+      - name: name
+        value: clair-scan
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.4@sha256:219964897ac4d5a9473ec297a1b39ae078a34b76b45d04c4672bd569cc295c29
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values: ["false"]
   - name: ecosystem-cert-preflight-checks
     params:
     - name: image-url