Use tini-git image for the resolvers deployment

And make sure the entrypoint (command) is tini.

Signed-off-by: Vincent Demeester <[email protected]>

Author: vdemeester

.ko.yaml

@@ -1,2 +1,2 @@
 baseImageOverrides:
-  github.com/tektoncd/pipeline/cmd/resolvers: cgr.dev/chainguard/git@sha256:566235a8ef752f37d285042ee05fc37dbb04293e50f116a231984080fb835693
+  github.com/tektoncd/pipeline/cmd/resolvers: ghcr.io/tektoncd/plumbing/tini-git@sha256:3d56865f83236872b0986c6c0716f5de56a1ca8eb3a86f37a46ce6202a6d4a66

config/resolvers/resolvers-deployment.yaml

@@ -64,6 +64,11 @@ spec:
       containers:
       - name: controller
         image: ko://github.com/tektoncd/pipeline/cmd/resolvers
+        command:
+        - /sbin/tini
+        - --
+        args:
+        - /ko-app/resolvers
         resources:
           requests:
             cpu: 100m
@@ -113,6 +118,7 @@ spec:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
           runAsNonRoot: true
+          runAsUser: 65532
           capabilities:
             drop:
             - "ALL"

tekton/publish.yaml

@@ -130,7 +130,7 @@ spec:
         $(params.package)/cmd/entrypoint: ${COMBINED_BASE_IMAGE}
         $(params.package)/cmd/nop: ${COMBINED_BASE_IMAGE}
         $(params.package)/cmd/workingdirinit: ${COMBINED_BASE_IMAGE}
-        $(params.package)/cmd/resolvers: cgr.dev/chainguard/git@sha256:566235a8ef752f37d285042ee05fc37dbb04293e50f116a231984080fb835693
+        $(params.package)/cmd/resolvers: ghcr.io/tektoncd/plumbing/tini-git@sha256:3d56865f83236872b0986c6c0716f5de56a1ca8eb3a86f37a46ce6202a6d4a66
       EOF
 
       cat /workspace/.ko.yaml