Add agentic SDLC conformance check pipeline (ROSA-730)

[tnierman]

Summary

• Adds a Konflux pipeline template that validates ROSA-730 agentic SDLC standards on every PR to subscriber repos
• Generated during make boilerplate-update — the operator name is substituted from config/config.go
• The check reports a visible red X on non-conformant PRs but does not block merge (not in required_status_checks)

What it checks

File existence (parallel task)

• CLAUDE.md, .pre-commit-config.yaml, .codecov.yml
• CONTRIBUTING.md, DEVELOPMENT.md, TESTING.md
• .claude/settings.json (conditional on CLAUDE.md existing)
• golangci.yml (in boilerplate convention dir or repo root)

Content validation (parallel task)

• CLAUDE.md has required sections (build commands, architecture/overview)
• .codecov.yml patch coverage target >= 50%
• .pre-commit-config.yaml includes gitleaks, golangci-lint, file hygiene hooks
• Documentation files are substantive (> 10 lines, not stubs)

Files changed

File	Description
boilerplate/openshift/golang-osd-operator/agentic-sdlc-check-pull-request.yaml.tmpl	PipelineRun template with __OPERATOR_NAME__ placeholders
boilerplate/openshift/golang-osd-operator/update	Added generation logic to create the .tekton/ PipelineRun during boilerplate update

How it works

1. During make boilerplate-update, the template is rendered with the operator name and written to .tekton/<operator>-agentic-sdlc-check-pull-request.yaml
2. Pipelines-as-Code picks it up and runs it on every PR
3. Uses the Konflux catalog git-clone:0.1 task for cloning, and quay.io/konflux-ci/git-clone image for the check steps
4. Three pipeline tasks: clone → file-existence + content-validation (the checks run in parallel)

Prior art

Tested and validated on openshift/deadmanssnitch-operator#337 — clone succeeds, both check tasks correctly report failures for missing ROSA-730 artifacts, pipeline shows red X without blocking merge.

Test plan

• Local dry-run against managed-velero-operator (conformant) and pagerduty-operator (non-conformant)
• Live Konflux pipeline test on deadmanssnitch-operator PR Dockerfile.appsre: fix ci image name from build farm #337
• Verified non-blocking: check fails but is not in required_status_checks, so /lgtm + /approve still merge
• Run make boilerplate-update on a subscriber repo to verify template generation

ROSA-730

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (2)

• boilerplate/openshift/golang-osd-operator/agentic-sdlc-check-pull-request.yaml.tmpl is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/update is excluded by !boilerplate/**

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: a268019c-a68e-4e3f-825e-24fe043c7028

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[clcollins]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: clcollins, tnierman

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [clcollins]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment