@@ -126,6 +126,14 @@ spec:
126126 default : docker
127127 type : string
128128 description : The format for the resulting image's mediaType. Valid values are oci or docker.
129+ - name : sast-target-dirs
130+ type : string
131+ default : .
132+ description : Target directories to scan with SAST tools. Multiple values should be separated with commas.
133+ - name : enable-package-registry-proxy
134+ default : ' true'
135+ description : Use the package registry proxy when prefetching dependencies
136+ type : string
129137 results :
130138 - description : ' '
131139 name : IMAGE_URL
@@ -146,7 +154,7 @@ spec:
146154 - name : name
147155 value : init
148156 - name : bundle
149- value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:f2de909151c733da85c7c05de8ecf37c55079c219dcf8db906175ae11fca0142
157+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
150158 - name : kind
151159 value : task
152160 resolver : bundles
@@ -167,7 +175,7 @@ spec:
167175 - name : name
168176 value : git-clone-oci-ta
169177 - name : bundle
170- value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:f3f28a40fb7b4c8a5c1ec935df5576139bb6ba5b80f3531f42da2f1f2448a53b
178+ value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407
171179 - name : kind
172180 value : task
173181 resolver : bundles
@@ -186,14 +194,16 @@ spec:
186194 value : $(params.output-image).prefetch
187195 - name : ociArtifactExpiresAfter
188196 value : $(params.image-expires-after)
197+ - name : enable-package-registry-proxy
198+ value : $(params.enable-package-registry-proxy)
189199 runAfter :
190200 - clone-repository
191201 taskRef :
192202 params :
193203 - name : name
194204 value : prefetch-dependencies-oci-ta
195205 - name : bundle
196- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:dca9728e1ba9eb1bf6419bc800f082d13f054a3db8b345af0b188ce3ee6246dd
206+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d
197207 - name : kind
198208 value : task
199209 resolver : bundles
@@ -245,7 +255,7 @@ spec:
245255 - name : name
246256 value : buildah-remote-oci-ta
247257 - name : bundle
248- value : quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.9@sha256:0bc358b7c16a1ff9a829b6ce327ddb46f5c539b3cf90ade653739ffdf2925176
258+ value : quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.9@sha256:f667d1146533b1d49829c08097e31faf27db24563da576434a707353de62099f
249259 - name : kind
250260 value : task
251261 resolver : bundles
@@ -267,7 +277,7 @@ spec:
267277 - name : name
268278 value : build-image-index
269279 - name : bundle
270- value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:b65a1e0961e0e768dda1f118bc5b5cab9c7ca7f4ed094e6a4352e66f82b9fa0b
280+ value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb
271281 - name : kind
272282 value : task
273283 resolver : bundles
@@ -288,7 +298,7 @@ spec:
288298 - name : name
289299 value : source-build-oci-ta
290300 - name : bundle
291- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0201377594e6e0e9d304aa23b2363e4f47e02f3ebb6fe5a410480c1a17c9edfb
301+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06
292302 - name : kind
293303 value : task
294304 resolver : bundles
@@ -310,7 +320,7 @@ spec:
310320 - name : name
311321 value : deprecated-image-check
312322 - name : bundle
313- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:5ff16b7e6b4a8aa1adb352e74b9f831f77ff97bafd1b89ddb0038d63335f1a67
323+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
314324 - name : kind
315325 value : task
316326 resolver : bundles
@@ -337,7 +347,7 @@ spec:
337347 - name : name
338348 value : clair-scan
339349 - name : bundle
340- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:cd49cdea7e5403a87c4774bd8ea10bc4e6aeb83841ff490cbe42b782779513a7
350+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:8fad4c2e2f470f82ee43d6b2ac72327b4d9c6e9cb514a678911c1c9359c29894
341351 - name : kind
342352 value : task
343353 resolver : bundles
@@ -357,7 +367,7 @@ spec:
357367 - name : name
358368 value : ecosystem-cert-preflight-checks
359369 - name : bundle
360- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:2d439dce35dc07bec38dcf450bcba949851686141a256d87eb6f42e5a217f6e2
370+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:01f29882054e5ee2441e6e6852f2fbdb9ebe1fbfdf6701ea147421dfe6b158d7
361371 - name : kind
362372 value : task
363373 resolver : bundles
@@ -376,6 +386,8 @@ spec:
376386 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
377387 - name : CACHI2_ARTIFACT
378388 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
389+ - name : TARGET_DIRS
390+ value : $(params.sast-target-dirs)
379391 runAfter :
380392 - build-image-index
381393 taskRef :
@@ -405,7 +417,7 @@ spec:
405417 - name : name
406418 value : clamav-scan
407419 - name : bundle
408- value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:171eca520b545a0c860c6d59249796ffe5db5be1dab87f3a328fc5ef1fd68af2
420+ value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:567cb66bd2e1f4b58b9d4d756f3317fc62479e0b40aa0de66094b1f12d296cfc
409421 - name : kind
410422 value : task
411423 resolver : bundles
@@ -448,6 +460,8 @@ spec:
448460 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
449461 - name : CACHI2_ARTIFACT
450462 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
463+ - name : TARGET_DIRS
464+ value : $(params.sast-target-dirs)
451465 runAfter :
452466 - coverity-availability-check
453467 taskRef :
@@ -495,6 +509,8 @@ spec:
495509 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
496510 - name : CACHI2_ARTIFACT
497511 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
512+ - name : TARGET_DIRS
513+ value : $(params.sast-target-dirs)
498514 runAfter :
499515 - build-image-index
500516 taskRef :
@@ -521,14 +537,16 @@ spec:
521537 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
522538 - name : CACHI2_ARTIFACT
523539 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
540+ - name : TARGET_DIRS
541+ value : $(params.sast-target-dirs)
524542 runAfter :
525543 - build-image-index
526544 taskRef :
527545 params :
528546 - name : name
529547 value : sast-unicode-check-oci-ta
530548 - name : bundle
531- value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:0854d9261760b2dc8f092569739685a5ab0a5c620e9cb8c1b78fef9e2d077a29
549+ value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749
532550 - name : kind
533551 value : task
534552 resolver : bundles
@@ -552,7 +570,7 @@ spec:
552570 - name : name
553571 value : apply-tags
554572 - name : bundle
555- value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:de3722bac1bf5ae8a95319162ce7e23fb33a7e2b7c0ac91535549f31a75aac86
573+ value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66
556574 - name : kind
557575 value : task
558576 resolver : bundles
@@ -575,7 +593,7 @@ spec:
575593 - name : name
576594 value : push-dockerfile-oci-ta
577595 - name : bundle
578- value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:aa0d54cdd04777562599195439186bb9ea28ced4529e9b860867611cca453a39
596+ value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71
579597 - name : kind
580598 value : task
581599 resolver : bundles
@@ -592,7 +610,7 @@ spec:
592610 - name : name
593611 value : rpms-signature-scan
594612 - name : bundle
595- value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d
613+ value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93
596614 - name : kind
597615 value : task
598616 resolver : bundles
0 commit comments