- Issued:
- 2026-04-23
- Updated:
- 2026-04-23
RHSA-2026:10026 - Security Advisory
Synopsis
Red Hat OpenShift Pipelines Release 1.20.4
Type/Severity
Security Advisory: Important
Topic
The 1.20.4 GA release of Red Hat OpenShift Pipelines Operator..
For more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).
Description
The 1.20.4 release of Red Hat OpenShift Pipelines Operator.
Solution
Red Hat OpenShift Pipelines is a cloud-native, continuous integration and
continuous delivery (CI/CD) solution based on Kubernetes resources.
It uses Tekton building blocks to automate deployments across multiple
platforms by abstracting away the underlying implementation details.
Tekton introduces a number of standard custom resource definitions (CRDs)
for defining CI/CD pipelines that are portable across Kubernetes distributions.
Fixes
(none)arm64
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:65940b32600afe6daf2b3371904c1cfebd165a18258fb84acf1fc37399afdb5a |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:4b6e42b725d0d3a67861ec575d23e312e41408abf47a0b583bc39accdf7d156d |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:6927b5530683b27344c3c930f60fdf4076495bd6e299c902f19953463080b3ea |
| registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:92a27e4f699b5deddf2cf1875fccb2f41652ba7c5259188bc8886d23687c17cc |
| registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:b32c6f189345b4f541364748061b11405c41c9d4841d38174cb25da8f452358b |
| registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:9c2cecd279db37a97a6cc10e3b9aefa209064271ea6bd52cda907230ff58b34b |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:2dd31612709a260473298dd8dc5f0a7acd2ddb4cb904cdb4a78af45fc78f3636 |
| registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:c55963aca692a6168530a5d83e2c714551bb834e028ccef73244c0392693f3c6 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:27b85727eca0deb019c4097f666840476395db587806779396e016a86b59ac51 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:a1011341b0fbd4d337ba3f29322c490e0d2c3ded18725a5ae62c1047a78c5681 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:f3d289b8532549a01582a518ee9225a4389868b043733faf1d1005a1a7b29be7 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:05efa0704e5927d7126a0bd97075716efce2b6fccfd803ee32deb626a5c91ed1 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:8f076dc87af9322a285f6ce4b434f2cd073377e0ea4d15ba176ba1d4d61d4cc4 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:439b014810a91be2fdc5c108acd149321057bd2647eb862ba0975b15fb3d2ced |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:744cff3d4a563ce9a2f89089b51a99ea88446015b5b3073ea0a6eb8bb7d24457 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:a3faa4886b2532151a088656803ce83f817565f450eb56cac88696aecfbeacb7 |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:083ede9ebeb8752d87e8c584c57e4486b28c63f48f21c55acd7e89d2f6b926ef |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:436c51c682e4ee1efb4f52096715652088bc02d8cc41318a478ba9816cca361b |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:54331cfda3badd4bdf26c5b331d8af3ec77f2c9691544de7083e299029016c95 |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:b6fd9bb6b74497f894ec72ac478466e4bea233914a4761e1efd274c058450ca8 |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:61cbd381d040072d401c2d5f318ca655e03aebecdb0cfca7d3145bcf2d8df12a |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:075f5a96c1a41306d7af0c949f4495441c2ec44978770009fa3068a612094ec6 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:9dae602db69076245413c4d27e7b40a1e1e9c17488faca69b7d88bc4294d51c5 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:dac40d2089fef971f95eb0cfd507e1b5cbc24acf6c0e6f0993e218075ee6d397 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:9d984a8118f465f780ee6552285d471a04edc3298560cfe1ba9d0e82a2620d51 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:928fbf03a21de75977efd8383ebb9c77f75d4623d2b258fc822df7613eae9458 |
ppc64le
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:ffc6719dffa2a204ad064029d2e891e8438c6345a32e421f41488f2ee9d02158 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:547aac8f1dffd6ca13be09057e35b15d2f02d2a9ec84089294f71909c51824ce |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:be6d06a7f918e9249f5226a53b98538485a7a0eea38621ccf927477be10d0372 |
| registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:376bdd49c7233d1d0e13d9ca606c07d51f138b747788c6fa0d34040158c86df5 |
| registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:2fc2f77648e795512cd58f9827abc60ca6f7a36c55222cba8ea2ac1a57410dfd |
| registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:9ec788140bcb4d8767ab538989be8b63298b06cd2393b60385310c6c496cd658 |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:9c258ab15a9664319fb20c37a24f694f5399986dcdd5e273fe5600b00ce94425 |
| registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:3f61b0a1d07d700a48f85ecbaf59d76521fb055a22733ccfebfca97c85825bed |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:2ae1ad50f3f8eba2609774e7c98eab3d1791418e30e2fcf2483942d375cb0605 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:9af4e1edc9678b88a1b8b6d0561f48ac1b47a12f27e9595ec5141dbbcd334aec |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:962a077137ca959e185b8f51c1ab9288cdf4be9dafa74a622e7dfeda65f431b0 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:3c0a8d53e0f5209f06a99cee929e36ae868983e23e34341782e32fc2362427bd |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:766dfe16f97601fada3f433cb49ec0972dd2a8291f1916ac930055b973a280ff |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:5e96c8968061cccbf10b7297dd4bf99a53c960c2d67366a8244c7fbe0c25a053 |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:ea383b6c04bb42bc6070de5ec8cb5042b6e27470a6a236b36f208de749830d81 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:6ec8e91be151109a106f698be9e3f44199a0efeea8bfb4b7bf6311be8e519af6 |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:310afa55b5ba2d3058fb1e4e532c56464b30faf2fa23296583d8e20925d0c859 |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:d61ce01266f6c62e3e1cae781eafc0d034bb9e50d14f1b4500566e35f6d0ca60 |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:79ac92992f13d1851ee8ba74dd1afcdd8983d45489bb58e050f5f3fab48e9e6f |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:f615b657099163e68cbeed2b0fca7b224ae8e406a3b9eb77bb81b170cc088a4f |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:d821a7e6ef088805f2dad9c7ef4cb2291cc1fa42c7ee9548d6b46e2ea810bc59 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:77932d26a6b71964f996df68cc48974aceef9a5e048c67648a1178f8558c4aec |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:17acdde2cdbc4d3faecc929046e085c23b7292fadfc1fde35a631a1d68e834d8 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:551a03f31896276a4ec691fa64593177ff24e3c68a7922710fada541d50ae99b |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:cc50070b54956f171e4e89b8936371bc8074c572eb50e862a48fabbdf3641468 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:3cee08eb6f0c9ee6fb7b56ed7267d3027e15cde7d53f451a767b66a8800e39a1 |
s390x
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:d76bd87bbe0ec9ce2e6ad006442b8fec270ac2d94ac044d150ff0c97d55b1689 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:51fd5b9419bebad5a8151230fc6cbfcbcfad355c0cd7384cce52de6b083d9115 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:f55a5c529554e853e5ce280abb824787e2e2e76613e6d90eeebe2ae297ae5e8b |
| registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:49328c67697b01ebd2d4f6188517bb901f715e1aefd21d23a6e33a7eebf49a5d |
| registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:14d6f7c12e7f181db1a60b1721bb0b7b9e4a737f0b0ffa8449f8508e73e38ccb |
| registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:17cc798cb974248a66a94ddd20586d4f0e32dced2f304a4f406878f0637c794a |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:f08e06d2264dc51181540cffc5a18d155bdce87167bee015188adde531b86129 |
| registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:2c2edaec3cd60796aea7c45ffeb74abe06d81c6c32c2bfdb868ed5752540f975 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:e5ea117b0598f46785107574fafc76ef0138751475b7d283551650b60626ad9f |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:2c9d44fcdf5f400087a77fa222d897d343e0d671d99829f3bcd5de44c570dc31 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:1fe95cb1392976db91eb0033797ad4ab1e7f2598ff6ed271bc87c8ad275b660a |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:c7b662322bb5137767ca6c7054960135f6eb2e1e58d2d97885b65e24c7fb9ecd |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:be84f6f723a5dccb3b25d7b51d7a2786827e37f33a9fcb24cb7e0e3cc67a3ee8 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:9295c272324ffe9c3d6378d0315e5d6c5e91ee64622935b26e232fffe07c4225 |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:a0f48ca6f8a7d9d87d1962974bab344c33d4ec8b37a64c163ac6ada3f3271a6e |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:7d2b3e967c2f339cb0bbb362cc5da40c4429ce082371a789589de9335edb3892 |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:131c2444ecbcb1defad3bb871214d3d149889eb91d6c6ba2eb97c0c055d01cec |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:f3c99b4bd800c6a608c2bab049daccf61c2822e1cd3b974b7f099bff010dac5e |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:4e3b3bfeb34a9c79ae7eaa64e3fd248ae1105309c1b213a213ff4a3be60f4037 |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:9b8663990fbbc495e64d71f2ab47d951042207fb9827bd971a7a25fc558badc9 |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:46c512703a1775a0e62db7723e50ac8429dd4523ad308f460037c617bd638020 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:bcdc71ebf2a7ae1b2fd44040823a3ad2dac7658f4171e6dcf5bb19bb41d7275d |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:5ddffcd68c1d0bf827e47ecb602fdc72b063fedd922e82a10c7c0c32628b1688 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:68d19b52c37ee25209b735f81ad05b55b3a17c49c29d5e657c2b7d602de45229 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:9a2df9ed23563d89f0c9ab3e5d3b57ec8947f9c087bf4dfa8d8e2f352b478b33 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:ea970597dd190a8ccf2cf9b79cd176c82be380fe6a268258b2a601f20363cced |
amd64
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:cacb1da0d7c69f4422ecedee7504bab7dc79dfe18ba30e28746a4b4f4bc05351 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:647d014835bd07571bb195c52fe4c0449e8a8a8750b344a1d5a45df06fd372c2 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:9f443faefbf30a0d699139fd93657dbc62560b6e654f859931f65526065ebebb |
| registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:11466675408cf4150b67445609fa208f0eacd234273c28cc8082a9526a0b6ed2 |
| registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:8d2e7068d92ab9d0c8acd71ddd4a8b5e3fd2757edc460a18e81415acca5a2cf6 |
| registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:6fc77db6045a62215c6b2c87ab9f7ac3892e381c645f2e78032d2788f83ca729 |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:3f18cbd40d453cb50e2c0012adf9d5310960038ea241aa0c2bd8a193455b9428 |
| registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:04dfc5de0d8e8a431159ebcc2c4c311a9c546392ffb495ce21e41dfb7d5f2e16 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:2f461c99cdcedaaf99b7313d0302ad20baab9fcae545d844ba59fc26618777a5 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:1a0bcbd805892a9895d0143ee1c2c694e1e1f1eff3326a303deb5eaa6e5fbffc |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:0caa7da1dc4d9bc97469d87db226f8e9117afc243f016ec007e63a499eacd885 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:e099d31b04aec0af0f3f28bdcb989640d4ef4cf58e2ab136585f93ebce9ee3fa |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:cba1d62b03607a828d8f183dd75b5a407bb79c8c52d9d82595523452ec377922 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:bd02c1fd188bbf3035d144d7f7af7efaf42ab852970e7940ec577092e47540de |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:5d13485446cb9334d7356abb3b26ff8a8521312705bd74c040b28c700651049c |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:2a0a54ddea2b4705e329cec213048054e59c255c650c7d132543d5576e61cea9 |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:e550b9f7c0eeeb53a346f0b1374d270b028da504ea52009721e1f92b90ff647d |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:3701303c7039d88d34cf6cc4094de4a87df08951e5f5d3dd11f6388dd1d40e19 |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:224b368e30c016813b6ef8207c2315c63691fa79028c743d8f7560ce74e71342 |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:040c993cf5074fb5836dfbd9458edf875a133f92fdae3acbc7e7d638fd7c75e9 |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:c7cb3543d53a7c27d08e49a2cabbb4501ac15070546c16853b65bb1257f6cdd1 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:1fbd070ed93685f8b5042e96a98273ac0970d9a5e81f603b82f0acbe141daef5 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:c47845cd9c8824a05a8cdee03dbb637428ec293684deeb3f53073059025eb7e4 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:4316e4879c784caae03626f3924ec61dbf6be88ed436dc079baa34d42fe087d6 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:b8638d20ab3983f546b60055b91e4f8bd794a1cbae2ea4c30ab4d5fb8462908d |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:e807fac592da1629692caf507c7501ddd21264ac7367996d4922011b9d03e9b9 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
