@@ -104,6 +104,10 @@ spec:
104104 default : ' true'
105105 description : Use the package registry proxy when prefetching dependencies
106106 type : string
107+ - name : sast-target-dirs
108+ type : string
109+ default : .
110+ description : Target directories to scan with SAST tools. Multiple values should be separated with commas.
107111 results :
108112 - description : " "
109113 name : IMAGE_URL
@@ -130,6 +134,8 @@ spec:
130134 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
131135 - name : CACHI2_ARTIFACT
132136 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
137+ - name : TARGET_DIRS
138+ value : $(params.sast-target-dirs)
133139 runAfter :
134140 - build-image-index
135141 taskRef :
@@ -167,7 +173,7 @@ spec:
167173 - name : name
168174 value : prefetch-dependencies-oci-ta
169175 - name : bundle
170- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43
176+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d
171177 - name : kind
172178 value : task
173179 resolver : bundles
@@ -204,7 +210,7 @@ spec:
204210 - name : name
205211 value : init
206212 - name : bundle
207- value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4
213+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
208214 - name : kind
209215 value : task
210216 resolver : bundles
@@ -346,7 +352,7 @@ spec:
346352 - name : name
347353 value : deprecated-image-check
348354 - name : bundle
349- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:5ff16b7e6b4a8aa1adb352e74b9f831f77ff97bafd1b89ddb0038d63335f1a67
355+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
350356 - name : kind
351357 value : task
352358 resolver : bundles
@@ -373,7 +379,7 @@ spec:
373379 - name : name
374380 value : clair-scan
375381 - name : bundle
376- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:cd49cdea7e5403a87c4774bd8ea10bc4e6aeb83841ff490cbe42b782779513a7
382+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:8fad4c2e2f470f82ee43d6b2ac72327b4d9c6e9cb514a678911c1c9359c29894
377383 - name : kind
378384 value : task
379385 resolver : bundles
@@ -398,7 +404,7 @@ spec:
398404 - name : name
399405 value : ecosystem-cert-preflight-checks
400406 - name : bundle
401- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:2468c01818fbaad2235e4fca438f28e847260e3e354cf5a441bbd671684af2db
407+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799
402408 - name : kind
403409 value : task
404410 resolver : bundles
@@ -425,7 +431,7 @@ spec:
425431 - name : name
426432 value : clamav-scan
427433 - name : bundle
428- value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:171eca520b545a0c860c6d59249796ffe5db5be1dab87f3a328fc5ef1fd68af2
434+ value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:567cb66bd2e1f4b58b9d4d756f3317fc62479e0b40aa0de66094b1f12d296cfc
429435 - name : kind
430436 value : task
431437 resolver : bundles
@@ -444,6 +450,8 @@ spec:
444450 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
445451 - name : CACHI2_ARTIFACT
446452 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
453+ - name : TARGET_DIRS
454+ value : $(params.sast-target-dirs)
447455 runAfter :
448456 - build-image-index
449457 taskRef :
@@ -470,14 +478,16 @@ spec:
470478 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
471479 - name : CACHI2_ARTIFACT
472480 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
481+ - name : TARGET_DIRS
482+ value : $(params.sast-target-dirs)
473483 runAfter :
474484 - build-image-index
475485 taskRef :
476486 params :
477487 - name : name
478488 value : sast-unicode-check-oci-ta
479489 - name : bundle
480- value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:0854d9261760b2dc8f092569739685a5ab0a5c620e9cb8c1b78fef9e2d077a29
490+ value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749
481491 - name : kind
482492 value : task
483493 resolver : bundles
@@ -522,7 +532,7 @@ spec:
522532 - name : name
523533 value : rpms-signature-scan
524534 - name : bundle
525- value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b
535+ value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93
526536 - name : kind
527537 value : task
528538 resolver : bundles
0 commit comments