Write build metadata to /i-am-rox-ci-image

[davdhacs]

Summary

• Populate /i-am-rox-ci-image with rox-ci-image version, git commit SHA, and key tool versions at build time
• Pass ROX_CI_IMAGE_VERSION and ROX_CI_IMAGE_GIT_COMMIT as build args from the Makefile
• Each image flavor logs the tools relevant to it
• This file is cat'd by the prow begin step (openshift/release#77727) for traceability when using floating tags like stable/latest

Example output (stackrox-test)

rox-ci-image-version=0.5.8
rox-ci-image-git-commit=abc123def456789...
aws=aws-cli/2.7.17 Python/3.9.11 Linux/5.15.0-1 exe/x86_64.centos.9 prompt/off
docker=Client:
 Version:           29.2.1
 API version:       1.47
 Go version:        go1.22.12
 ...
gcloud=Google Cloud SDK 512.0.0
go=go version go1.25.7 linux/amd64
gradle=
------------------------------------------------------------
Gradle 7.5.1
------------------------------------------------------------
...
helm=version.BuildInfo{Version:"v3.20.0", GitCommit:"...", ...}
java=openjdk version "17.0.14" 2025-01-21 LTS
kubectl=Client Version: v1.31.0
...
oc=Client Version: 4.11.0
roxie=roxie version 0.1.2
shellcheck=ShellCheck - shell script analysis tool
version: 0.10.0
...
vault=Vault v1.12.1
yq=yq (https://github.com/mikefarah/yq/) version v4.16.2

Test plan

• CI builds succeed
• Pull a built image and verify cat /i-am-rox-ci-image shows metadata

🤖 Generated with Claude Code

[github-actions]

Build Images

Image Flavor	Image Tag
jenkins-plugin	quay.io/stackrox-io/apollo-ci:jenkins-plugin-0.5.7-9-g8dcc9f30f9
scanner-build	quay.io/stackrox-io/apollo-ci:scanner-build-0.5.7-9-g8dcc9f30f9
scanner-test	quay.io/stackrox-io/apollo-ci:scanner-test-0.5.7-9-g8dcc9f30f9
stackrox-build	quay.io/stackrox-io/apollo-ci:stackrox-build-0.5.7-9-g8dcc9f30f9
stackrox-test	quay.io/stackrox-io/apollo-ci:stackrox-test-0.5.7-9-g8dcc9f30f9
stackrox-ui-test	quay.io/stackrox-io/apollo-ci:stackrox-ui-test-0.5.7-9-g8dcc9f30f9