push to a unique tag in buildah tasks

- Built image in buildah task is pushed to
a location specified in the `IMAGE` param
- This location does not have to be unique
when running multiple PipelineRuns on the
same revision
- A race condition can occur resulting
in a failure
- Besides pushing to `IMAGE`, push to a
tag named after the TaskRun name which
should be unique

task/buildah-oci-ta/0.2/buildah-oci-ta.yaml

@@ -662,6 +662,15 @@ spec:
 
         buildah commit "${BUILDAH_ARGS[@]}" $container $IMAGE
 
+        echo "Pushing to ${IMAGE%:*}:${TASKRUN_NAME}"
+        if ! retry buildah push \
+          --tls-verify="$TLSVERIFY" \
+          "$IMAGE" \
+          "docker://${IMAGE%:*}:$(context.taskRun.name)"; then
+          echo "Failed to push sbom image to ${IMAGE%:*}:$(context.taskRun.name) after ${max_run} tries"
+          exit 1
+        fi
+
         echo "Pushing to ${IMAGE}"
         if ! retry buildah push \
           --tls-verify="$TLSVERIFY" \

task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml

@@ -780,6 +780,15 @@ spec:
 
       buildah commit "${BUILDAH_ARGS[@]}" $container $IMAGE
 
+      echo "Pushing to ${IMAGE%:*}:${TASKRUN_NAME}"
+      if ! retry buildah push \
+        --tls-verify="$TLSVERIFY" \
+        "$IMAGE" \
+        "docker://${IMAGE%:*}:$(context.taskRun.name)"; then
+        echo "Failed to push sbom image to ${IMAGE%:*}:$(context.taskRun.name) after ${max_run} tries"
+        exit 1
+      fi
+
       echo "Pushing to ${IMAGE}"
       if ! retry buildah push \
         --tls-verify="$TLSVERIFY" \

task/buildah-remote/0.2/buildah-remote.yaml

@@ -471,7 +471,6 @@ spec:
           VOLUME_MOUNTS+=(--volume /etc/rhsm/ca/redhat-uep.pem:/run/secrets/rhsm/ca/redhat-uep.pem)
         fi
 
-
       # was: if [ -d "$ACTIVATION_KEY_PATH" ]; then
       elif find /entitlement -name "*.pem" >> null; then
         cp -r --preserve=mode "$ENTITLEMENT_PATH" /tmp/entitlement
@@ -758,6 +757,16 @@ spec:
 
       buildah commit "${BUILDAH_ARGS[@]}" $container $IMAGE
 
+      echo "Pushing to ${IMAGE%:*}:${TASKRUN_NAME}"
+      if ! retry buildah push \
+        --tls-verify="$TLSVERIFY" \
+        "$IMAGE" \
+        "docker://${IMAGE%:*}:$(context.taskRun.name)";
+      then
+        echo "Failed to push sbom image to ${IMAGE%:*}:$(context.taskRun.name) after ${max_run} tries"
+        exit 1
+      fi
+
       echo "Pushing to ${IMAGE}"
       if ! retry buildah push \
         --tls-verify="$TLSVERIFY" \

task/buildah/0.2/buildah.yaml

@@ -392,7 +392,6 @@ spec:
           VOLUME_MOUNTS+=(--volume /etc/rhsm/ca/redhat-uep.pem:/run/secrets/rhsm/ca/redhat-uep.pem)
         fi
 
-
       # was: if [ -d "$ACTIVATION_KEY_PATH" ]; then
       elif find /entitlement -name "*.pem" >> null; then
         cp -r --preserve=mode "$ENTITLEMENT_PATH" /tmp/entitlement
@@ -607,6 +606,16 @@ spec:
 
       buildah commit "${BUILDAH_ARGS[@]}" $container $IMAGE
 
+      echo "Pushing to ${IMAGE%:*}:${TASKRUN_NAME}"
+      if ! retry buildah push \
+        --tls-verify="$TLSVERIFY" \
+        "$IMAGE" \
+        "docker://${IMAGE%:*}:$(context.taskRun.name)";
+      then
+        echo "Failed to push sbom image to ${IMAGE%:*}:$(context.taskRun.name) after ${max_run} tries"
+        exit 1
+      fi
+
       echo "Pushing to ${IMAGE}"
       if ! retry buildah push \
         --tls-verify="$TLSVERIFY" \