[WIP] feat: replace Fernet (AES-128-CBC) with AES-256-GCM for DCR secret encryption - #106

• Namespace: ai5-marketplace-tenant
• PipelineRun: google-marketplace-handler-on-pull-request-q9clq

---

Task Statuses:

Status	Duration	Name
🟢 Succeeded	4 seconds	init
🟢 Succeeded	8 seconds	clone-repository
🟢 Succeeded	22 seconds	prefetch-dependencies
🟢 Succeeded	1 minute	build-container
🟢 Succeeded	13 seconds	build-image-index
🟢 Succeeded	34 seconds	clair-scan
🟢 Succeeded	32 seconds	clamav-scan
🟢 Succeeded	6 seconds	coverity-availability-check
🟢 Succeeded	13 seconds	deprecated-base-image-check
🟢 Succeeded	5 seconds	apply-tags
🟢 Succeeded	7 seconds	push-dockerfile
🟢 Succeeded	24 seconds	ecosystem-cert-preflight-checks
🟢 Succeeded	32 seconds	rpms-signature-scan
🔴 Failed	4 seconds	sast-shell-check
🟢 Succeeded	26 seconds	sast-snyk-check
🟢 Succeeded	12 seconds	sast-unicode-check

---

Failure snippet:

task sast-shell-check has the status "TaskRunImagePullFailed":

the step "upload" in TaskRun "google-marketpac0d19d9db31366dcba87ddf57eec52b-sast-shell-check" failed to pull the image "". The pod errored with the message: "Back-off pulling image "quay.io/konflux-ci/oras:latest@sha256:f322638a8a337f26adda3f72d3fbcf7e1218a6d8d7e2365376487417a05e0f4e"."