@@ -122,6 +122,10 @@ spec:
122122 default : ' true'
123123 description : Use the package registry proxy when prefetching dependencies
124124 type : string
125+ - name : sast-target-dirs
126+ type : string
127+ default : .
128+ description : Target directories to scan with SAST tools. Multiple values should be separated with commas.
125129 results :
126130 - description : " "
127131 name : IMAGE_URL
@@ -145,7 +149,7 @@ spec:
145149 - name : name
146150 value : init
147151 - name : bundle
148- value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4
152+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
149153 - name : kind
150154 value : task
151155 resolver : bundles
@@ -192,7 +196,7 @@ spec:
192196 - name : name
193197 value : prefetch-dependencies-oci-ta
194198 - name : bundle
195- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43
199+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d
196200 - name : kind
197201 value : task
198202 resolver : bundles
@@ -308,7 +312,7 @@ spec:
308312 - name : name
309313 value : deprecated-image-check
310314 - name : bundle
311- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:57d1f556982115311f603dd9a728c52a7a1d092f022e1db4560da01eca9e5d17
315+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
312316 - name : kind
313317 value : task
314318 resolver : bundles
@@ -330,7 +334,7 @@ spec:
330334 - name : name
331335 value : clair-scan
332336 - name : bundle
333- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:cd49cdea7e5403a87c4774bd8ea10bc4e6aeb83841ff490cbe42b782779513a7
337+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:8fad4c2e2f470f82ee43d6b2ac72327b4d9c6e9cb514a678911c1c9359c29894
334338 - name : kind
335339 value : task
336340 resolver : bundles
@@ -350,7 +354,7 @@ spec:
350354 - name : name
351355 value : ecosystem-cert-preflight-checks
352356 - name : bundle
353- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34
357+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e2bcf1174a6dae9969b8f12e94babe2a5881bc77a509f10823b6a9eac6392850
354358 - name : kind
355359 value : task
356360 resolver : bundles
@@ -369,6 +373,8 @@ spec:
369373 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
370374 - name : CACHI2_ARTIFACT
371375 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
376+ - name : TARGET_DIRS
377+ value : $(params.sast-target-dirs)
372378 runAfter :
373379 - build-image-index
374380 taskRef :
@@ -436,6 +442,8 @@ spec:
436442 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
437443 - name : CACHI2_ARTIFACT
438444 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
445+ - name : TARGET_DIRS
446+ value : $(params.sast-target-dirs)
439447 runAfter :
440448 - coverity-availability-check
441449 taskRef :
@@ -483,6 +491,8 @@ spec:
483491 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
484492 - name : CACHI2_ARTIFACT
485493 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
494+ - name : TARGET_DIRS
495+ value : $(params.sast-target-dirs)
486496 runAfter :
487497 - build-image-index
488498 taskRef :
@@ -509,6 +519,8 @@ spec:
509519 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
510520 - name : CACHI2_ARTIFACT
511521 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
522+ - name : TARGET_DIRS
523+ value : $(params.sast-target-dirs)
512524 runAfter :
513525 - build-image-index
514526 taskRef :
@@ -578,7 +590,7 @@ spec:
578590 - name : name
579591 value : rpms-signature-scan
580592 - name : bundle
581- value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:1d807f6be3be2bd8bff76321e9599bbafce8196dcd9597eeffd9df65466682af
593+ value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:cfdb76c67f27bc498132431f5a24fbc17dac1981d6f6e3da5cf5964ac5abdd20
582594 - name : kind
583595 value : task
584596 resolver : bundles
0 commit comments