konflux-cookbook

Clone a repo with working hermetic builds and compare the implementation against the hermeto guide to identify gaps and improvements

Provision a VM on Red Hat Beaker for multi-arch testing

Run check-payload locally to scan container images for FIPS compliance issues before they block a Konflux release

Run Conforma (Enterprise Contract) validation against a Konflux snapshot or a single image to check release policy compliance

Create a temporary pull request PipelineRun from an existing push PipelineRun to test build changes on an RHOAI release branch

Deploy locally-working hermetic build configuration into Konflux pipelines for RHOAI components

Productize an upstream Dockerfile for Konflux builds — base image swaps, digest pinning, FIPS compliance, label metadata, and build-arg simplification

Set up Hermeto prefetching for hermetic Konflux builds