chore(deps): update osc-dm-verity-image to 3ea54c8

[red-hat-konflux]

Image created from 'https://github.com/confidential-devhub/coco-podvm-scripts?rev=3e66cc48ab29e14154d31d1f074de21f17714fde'

This PR contains the following updates:

Package	Update	Change
quay.io/redhat-user-workloads/ose-osc-tenant/osc-dm-verity-image	digest	3147a2d -> 3ea54c8

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test
This is Konflux nudging PR, not Mintmaker.

[openshift-merge-bot]

Pipeline controller notification

This PR uses the pipeline controller for second-stage tests. Selection and triggering follow the repository configuration.

Use /test ? to list jobs, /pipeline remaining to request missing second-stage tests, or /pipeline required to rerun the selected second-stage set.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 8a72dd58-d428-4d75-99c7-70aea0ea160f

📥 Commits

Reviewing files that changed from the base of the PR and between 9d11ee2 and 90463cf.

📒 Files selected for processing (2)

• bundle/manifests/sandboxed-containers-operator.clusterserviceversion.yaml
• config/manager/manager.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

📝 Walkthrough

Walkthrough

The RELATED_IMAGE_PODVM_OCI environment variable and the podvm-oci related image now use digest 3ea54c826450f02eca9737364c9709089b59fe5dc0052cfe357b1b83ef533e21 instead of the previous digest. The registry and repository are unchanged.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: littlejawa

Merge Risk: ⚪ Minimal · up to 90463

The PodVM OCI image references are consistent across the supplied configuration and bundle changes; no actionable merge risk is identified.

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the dependency image update and includes the new digest prefix. It matches the main change.
Description check	✅ Passed	The description directly explains the image digest update, source revision, and affected image.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The pull request changes only two YAML image references. The diff contains no Ginkgo test declarations or test-title changes, so it introduces no unstable or overly-specific test names.
Test Structure And Quality	✅ Passed	The pull request changes only two YAML manifests. The diff updates the RELATED_IMAGE_PODVM_OCI image digest and the matching podvm-oci related image. It does not add or modify Ginkgo tests, so the…
Microshift Test Compatibility	✅ Passed	PASS — The pull request changes only two YAML image references from one digest to another. The authoritative diff contains no added Ginkgo tests or other test code, so this MicroShift test-compatibili…
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The pull request changes only two YAML image references for RELATED_IMAGE_PODVM_OCI and podvm-oci. It adds no Ginkgo e2e tests or other test code, so the SNO multi-node compatibility check is not …
Topology-Aware Scheduling Compatibility	✅ Passed	PASS: The pull request changes only the osc-dm-verity-image digest in two manifests. It does not add or modify replicas, affinity, topology spread, node selectors, tolerations, scheduling constraint…
Ote Binary Stdout Contract	✅ Passed	PASS. The pull request changes only two YAML image references, updating the osc-dm-verity-image digest in the deployment environment and related-images list. It adds no process-level code or stdout …
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The pull request changes only two YAML image references. It adds no Ginkgo e2e tests and introduces no IPv4 assumptions or external connectivity requirements.
No-Weak-Crypto	✅ Passed	The PR only updates an OCI image digest in two YAML manifests. The changed references use sha256, and the added lines contain no MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB, custom crypto, or secret-co…
Container-Privileges	✅ Passed	The pull request changes only the osc-dm-verity-image digest in two manifests. It does not add privileged: true, hostPID, hostNetwork, hostIPC, SYS_ADMIN, or `allowPrivilegeEscalation: tru…
No-Sensitive-Data-In-Logs	✅ Passed	The pull request changes only three image digest values in two YAML manifests. No logging code, logging configuration, or sensitive-data output was added. The new values are public container image ref…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[littlejawa]

/ok-to-test

[red-hat-konflux]

All PipelineRuns for this commit have already succeeded. Use /retest <pipeline-name> to re-run a specific pipeline or /test to re-run all pipelines.