Try fixing enterprise contracts (again)

.tekton/fbc-4-18-pull-request.yaml

@@ -32,6 +32,10 @@ spec:
     - linux/arm64
     - linux/ppc64le
     - linux/s390x
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"type": "gomod", "path": "."}'
   - name: dockerfile
     value: Dockerfile
   pipelineSpec:
@@ -113,6 +117,9 @@ spec:
       type: string
     - default:
       - linux/x86_64
+      - linux/arm64
+      - linux/s390x
+      - linux/ppc64le
       description: List of platforms to build the container images on. The available
         set of values is determined by the configuration of the multi-platform-controller.
       name: build-platforms

.tekton/fbc-4-18-push.yaml

@@ -31,6 +31,10 @@ spec:
     - linux/s390x
   - name: dockerfile
     value: Dockerfile
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"type": "gomod", "path": "."}'
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.

.tekton/nbde-tang-server-multiarch-bundle-pull-request.yaml

@@ -28,6 +28,8 @@ spec:
     value: 5d
   - name: dockerfile
     value: bundle.konflux.Dockerfile
+  - name: hermetic
+    value: "true"
   pipelineSpec:
     description: |
       This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.

.tekton/nbde-tang-server-multiarch-bundle-push.yaml

@@ -25,6 +25,8 @@ spec:
     value: quay.io/redhat-user-workloads/konflux-sec-eng-spec-tenant/nbde-tang-server-multiarch-bundle:{{revision}}
   - name: dockerfile
     value: bundle.konflux.Dockerfile
+  - name: hermetic
+    value: "true"
   pipelineSpec:
     description: |
       This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.

.tekton/nbde-tang-server-multiarch-pull-request.yaml

@@ -26,6 +26,16 @@ spec:
     value: quay.io/redhat-user-workloads/konflux-sec-eng-spec-tenant/nbde-tang-server-multiarch:on-pr-{{revision}}
   - name: image-expires-after
     value: 5d
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"type": "gomod", "path": "."}'
+  - name: build-platforms
+    value:
+    - linux/x86_64
+    - linux/arm64
+    - linux/ppc64le
+    - linux/s390x
   - name: dockerfile
     value: Dockerfile
   pipelineSpec:

.tekton/nbde-tang-server-multiarch-push.yaml

@@ -23,6 +23,10 @@ spec:
     value: '{{revision}}'
   - name: output-image
     value: quay.io/redhat-user-workloads/konflux-sec-eng-spec-tenant/nbde-tang-server-multiarch:{{revision}}
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"type": "gomod", "path": "."}'
   - name: dockerfile
     value: Dockerfile
   pipelineSpec: