@@ -8,9 +8,8 @@ metadata:
88 build.appstudio.redhat.com/target_branch : ' {{target_branch}}'
99 pipelinesascode.tekton.dev/cancel-in-progress : " true"
1010 pipelinesascode.tekton.dev/max-keep-runs : " 3"
11- pipelinesascode.tekton.dev/on-cel-expression : event == "pull_request" && target_branch
12- == "release-1.2"
13- creationTimestamp : null
11+ pipelinesascode.tekton.dev/on-cel-expression : event == "pull_request" && target_branch == "release-1.2"
12+ creationTimestamp :
1413 labels :
1514 appstudio.openshift.io/application : aws-lb-optr-1-2-rhel-8
1615 appstudio.openshift.io/component : aws-load-balancer-operator-container-aws-lb-optr-1-2-rhel-8
@@ -47,13 +46,11 @@ spec:
4746 name : output-image
4847 type : string
4948 - default : .
50- description : Path to the source code of an application's component from where
51- to build image.
49+ description : Path to the source code of an application's component from where to build image.
5250 name : path-context
5351 type : string
5452 - default : Dockerfile
55- description : Path to the Dockerfile inside the context specified by parameter
56- path-context
53+ description : Path to the Dockerfile inside the context specified by parameter path-context
5754 name : dockerfile
5855 type : string
5956 - default : " false"
7370 name : prefetch-input
7471 type : string
7572 - default : " "
76- description : Image tag expiration time, time values could be something like
77- 1h, 2d, 3w for hours, days, and weeks, respectively.
73+ description : Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
7874 name : image-expires-after
7975 type : string
8076 - default : " false"
8682 name : build-image-index
8783 type : string
8884 - default : docker
89- description : The format for the resulting image's mediaType. Valid values are
90- oci or docker.
85+ description : The format for the resulting image's mediaType. Valid values are oci or docker.
9186 name : buildah-format
9287 type : string
9388 - default : " false"
@@ -102,10 +97,17 @@ spec:
10297 name : build-args-file
10398 type : string
10499 - default : " false"
105- description : Whether to enable privileged mode, should be used only with remote
106- VMs
100+ description : Whether to enable privileged mode, should be used only with remote VMs
107101 name : privileged-nested
108102 type : string
103+ - name : sast-target-dirs
104+ type : string
105+ default : .
106+ description : Target directories to scan with SAST tools. Multiple values should be separated with commas.
107+ - name : enable-package-registry-proxy
108+ default : ' true'
109+ description : Use the package registry proxy when prefetching dependencies
110+ type : string
109111 results :
110112 - description : " "
111113 name : IMAGE_URL
@@ -135,7 +137,7 @@ spec:
135137 - name : name
136138 value : init
137139 - name : bundle
138- value : quay.io/konflux-ci/tekton-catalog/task-init:0.2 @sha256:75b88ee5e134a22ee35eb974808dfe6a63693115fa445208a9060a7175b448cf
140+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.4 @sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
139141 - name : kind
140142 value : task
141143 resolver : bundles
@@ -156,7 +158,7 @@ spec:
156158 - name : name
157159 value : git-clone-oci-ta
158160 - name : bundle
159- value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0a89e1a6304076525e9766f63a4cd006763d21d5aca6863281fc427537a23c6f
161+ value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407
160162 - name : kind
161163 value : task
162164 resolver : bundles
@@ -178,14 +180,16 @@ spec:
178180 value : $(params.output-image).prefetch
179181 - name : ociArtifactExpiresAfter
180182 value : $(params.image-expires-after)
183+ - name : enable-package-registry-proxy
184+ value : $(params.enable-package-registry-proxy)
181185 runAfter :
182186 - clone-repository
183187 taskRef :
184188 params :
185189 - name : name
186190 value : prefetch-dependencies-oci-ta
187191 - name : bundle
188- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2 @sha256:3fa0204a481044b21f0e784ce39cbd25e8fb49c664a5458f3eef351fff1c906e
192+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3 @sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d
189193 - name : kind
190194 value : task
191195 resolver : bundles
@@ -236,7 +240,7 @@ spec:
236240 - name : name
237241 value : buildah-oci-ta
238242 - name : bundle
239- value : quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.7 @sha256:5ccd3a83a04cb98af78ac574db76775f8e871b1bbb746994539404257b5707f1
243+ value : quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9 @sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6
240244 - name : kind
241245 value : task
242246 resolver : bundles
@@ -249,10 +253,6 @@ spec:
249253 params :
250254 - name : IMAGE
251255 value : $(params.output-image)
252- - name : COMMIT_SHA
253- value : $(tasks.clone-repository.results.commit)
254- - name : IMAGE_EXPIRES_AFTER
255- value : $(params.image-expires-after)
256256 - name : ALWAYS_BUILD_INDEX
257257 value : $(params.build-image-index)
258258 - name : IMAGES
@@ -267,7 +267,7 @@ spec:
267267 - name : name
268268 value : build-image-index
269269 - name : bundle
270- value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.2 @sha256:39561ac43e325159497c10c0284cf61dfddf39e39100ca5e3df6b73c5d96db8b
270+ value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3 @sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb
271271 - name : kind
272272 value : task
273273 resolver : bundles
@@ -293,7 +293,7 @@ spec:
293293 - name : name
294294 value : source-build-oci-ta
295295 - name : bundle
296- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:4abb2dbc9dcfad52d56b490a2f25f99989a2cb2bbd9881223025272db60fd75e
296+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06
297297 - name : kind
298298 value : task
299299 resolver : bundles
@@ -319,7 +319,7 @@ spec:
319319 - name : name
320320 value : deprecated-image-check
321321 - name : bundle
322- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:462baed733dfc38aca5395499e92f19b6f13a74c2e88fe5d86c3cffa2f899b57
322+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
323323 - name : kind
324324 value : task
325325 resolver : bundles
@@ -341,7 +341,7 @@ spec:
341341 - name : name
342342 value : clair-scan
343343 - name : bundle
344- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:ee558db6af779ab162163ec88f288a5c1b2d5f70c3361f3690a474866e3bdc74
344+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:8fad4c2e2f470f82ee43d6b2ac72327b4d9c6e9cb514a678911c1c9359c29894
345345 - name : kind
346346 value : task
347347 resolver : bundles
@@ -361,7 +361,7 @@ spec:
361361 - name : name
362362 value : ecosystem-cert-preflight-checks
363363 - name : bundle
364- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:04f75593558f79a27da2336400bc63d460bf0c5669e3c13f40ee2fb650b1ad1e
364+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799
365365 - name : kind
366366 value : task
367367 resolver : bundles
@@ -380,14 +380,16 @@ spec:
380380 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
381381 - name : CACHI2_ARTIFACT
382382 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
383+ - name : TARGET_DIRS
384+ value : $(params.sast-target-dirs)
383385 runAfter :
384386 - build-image-index
385387 taskRef :
386388 params :
387389 - name : name
388390 value : sast-snyk-check-oci-ta
389391 - name : bundle
390- value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8ad28b7783837a24acbc9a8494c935e796e591ce476085ad5899bebd7e53f077
392+ value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb
391393 - name : kind
392394 value : task
393395 resolver : bundles
@@ -409,7 +411,7 @@ spec:
409411 - name : name
410412 value : clamav-scan
411413 - name : bundle
412- value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:f3d2d179cddcc07d0228d9f52959a233037a3afa2619d0a8b2effbb467db80c3
414+ value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:567cb66bd2e1f4b58b9d4d756f3317fc62479e0b40aa0de66094b1f12d296cfc
413415 - name : kind
414416 value : task
415417 resolver : bundles
@@ -426,7 +428,7 @@ spec:
426428 - name : name
427429 value : coverity-availability-check
428430 - name : bundle
429- value : quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:36400873d3031df128c55aa71ee11d322c3e55fd8f13dc5779098fbc117c0aa3
431+ value : quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
430432 - name : kind
431433 value : task
432434 resolver : bundles
@@ -445,14 +447,16 @@ spec:
445447 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
446448 - name : CACHI2_ARTIFACT
447449 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
450+ - name : TARGET_DIRS
451+ value : $(params.sast-target-dirs)
448452 runAfter :
449453 - build-image-index
450454 taskRef :
451455 params :
452456 - name : name
453457 value : sast-shell-check-oci-ta
454458 - name : bundle
455- value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:d44336d7bcbd1f7cedee639357a493bd1f661e2859e49e11a34644bdf6819c4e
459+ value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57
456460 - name : kind
457461 value : task
458462 resolver : bundles
@@ -471,14 +475,16 @@ spec:
471475 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
472476 - name : CACHI2_ARTIFACT
473477 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
478+ - name : TARGET_DIRS
479+ value : $(params.sast-target-dirs)
474480 runAfter :
475481 - build-image-index
476482 taskRef :
477483 params :
478484 - name : name
479485 value : sast-unicode-check-oci-ta
480486 - name : bundle
481- value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3 @sha256:e5a8d3e8e7be7246a1460385b95c084ea6e8fe7520d40fe4389deb90f1bf5176
487+ value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4 @sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749
482488 - name : kind
483489 value : task
484490 resolver : bundles
@@ -500,7 +506,7 @@ spec:
500506 - name : name
501507 value : apply-tags
502508 - name : bundle
503- value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2 @sha256:e4017ec351a0891ef95989f35bd20b8c3f091fa1a3da364c4d4e975e99f3063c
509+ value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3 @sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66
504510 - name : kind
505511 value : task
506512 resolver : bundles
@@ -523,7 +529,7 @@ spec:
523529 - name : name
524530 value : push-dockerfile-oci-ta
525531 - name : bundle
526- value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1 @sha256:08bba4a659ecd48f871bef00b80af58954e5a09fcbb28a1783ddd640c4f6535e
532+ value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3 @sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71
527533 - name : kind
528534 value : task
529535 resolver : bundles
@@ -540,7 +546,7 @@ spec:
540546 - name : name
541547 value : rpms-signature-scan
542548 - name : bundle
543- value : quay.io/konflux-ci/konflux-vanguard /task-rpms-signature-scan:0.2@sha256:20eb21c60522a12198205f70b9c58cb5d71db561a255a3ba1ced56ae7b4af270
549+ value : quay.io/konflux-ci/tekton-catalog /task-rpms-signature-scan:0.2@sha256:2f3015ac7a642ea7f104d2194a8cb45921570f9539c6604ddcb5f62796f22a53
544550 - name : kind
545551 value : task
546552 resolver : bundles
0 commit comments