8484 default : ' true'
8585 description : Use the package registry proxy when prefetching dependencies
8686 type : string
87+ - name : sast-target-dirs
88+ type : string
89+ default : .
90+ description : Target directories to scan with SAST tools. Multiple values should be separated with commas.
8791 results :
8892 - description : ' '
8993 name : IMAGE_URL
@@ -107,7 +111,7 @@ spec:
107111 - name : name
108112 value : init
109113 - name : bundle
110- value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4
114+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
111115 - name : kind
112116 value : task
113117 resolver : bundles
@@ -154,7 +158,7 @@ spec:
154158 - name : name
155159 value : prefetch-dependencies-oci-ta
156160 - name : bundle
157- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43
161+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d
158162 - name : kind
159163 value : task
160164 resolver : bundles
@@ -266,7 +270,7 @@ spec:
266270 - name : name
267271 value : deprecated-image-check
268272 - name : bundle
269- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:57d1f556982115311f603dd9a728c52a7a1d092f022e1db4560da01eca9e5d17
273+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
270274 - name : kind
271275 value : task
272276 resolver : bundles
@@ -288,7 +292,7 @@ spec:
288292 - name : name
289293 value : clair-scan
290294 - name : bundle
291- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:cd49cdea7e5403a87c4774bd8ea10bc4e6aeb83841ff490cbe42b782779513a7
295+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:8fad4c2e2f470f82ee43d6b2ac72327b4d9c6e9cb514a678911c1c9359c29894
292296 - name : kind
293297 value : task
294298 resolver : bundles
@@ -308,7 +312,7 @@ spec:
308312 - name : name
309313 value : ecosystem-cert-preflight-checks
310314 - name : bundle
311- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34
315+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799
312316 - name : kind
313317 value : task
314318 resolver : bundles
@@ -327,6 +331,8 @@ spec:
327331 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
328332 - name : CACHI2_ARTIFACT
329333 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
334+ - name : TARGET_DIRS
335+ value : $(params.sast-target-dirs)
330336 runAfter :
331337 - build-image-index
332338 taskRef :
@@ -375,6 +381,8 @@ spec:
375381 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
376382 - name : CACHI2_ARTIFACT
377383 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
384+ - name : TARGET_DIRS
385+ value : $(params.sast-target-dirs)
378386 runAfter :
379387 - build-image-index
380388 taskRef :
@@ -401,6 +409,8 @@ spec:
401409 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
402410 - name : image-digest
403411 value : $(tasks.build-image-index.results.IMAGE_DIGEST)
412+ - name : TARGET_DIRS
413+ value : $(params.sast-target-dirs)
404414 runAfter :
405415 - build-image-index
406416 taskRef :
@@ -470,7 +480,7 @@ spec:
470480 - name : name
471481 value : rpms-signature-scan
472482 - name : bundle
473- value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:1d807f6be3be2bd8bff76321e9599bbafce8196dcd9597eeffd9df65466682af
483+ value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93
474484 - name : kind
475485 value : task
476486 resolver : bundles
0 commit comments