base-images-and-rpms
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches maintenance and PR creation scripts (
updateBaseImages.sh,getLatestImageTags.sh,createPR.sh) from Red Hat's internal GitLab instance (gitlab.cee.redhat.com). - [EXTERNAL_DOWNLOADS]: Downloads and installs the
rpm-lockfile-prototypetool directly from the Konflux-CI GitHub repository via pip. - [EXTERNAL_DOWNLOADS]: Downloads Node.js header archives from the official
nodejs.orgdistribution site to align development environment files. - [REMOTE_CODE_EXECUTION]: Executes the shell scripts downloaded from the internal GitLab server to automate the update workflow.
- [COMMAND_EXECUTION]: Uses
gitand the GitHub CLI (gh) to manage local branches, commit changes, and open pull requests automatically. - [COMMAND_EXECUTION]: Invokes
podmanordockerto run container images for the purpose of detecting Node.js and Go version strings.
Audit Metadata