2323 - name : name
2424 value : show-sbom
2525 - name : bundle
26- value : quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:beb0616db051952b4b861dd8c3e00fa1c0eccbd926feddf71194d3bb3ace9ce7
26+ value : quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:a7346ed61237db4f82ff782e0c9e8b30536e0e67b907ad600341a6d192e80012
2727 - name : kind
2828 value : task
2929 resolver : bundles
@@ -104,6 +104,14 @@ spec:
104104 description : Whether to enable privileged mode, should be used only with remote VMs
105105 name : privileged-nested
106106 type : string
107+ - name : sast-target-dirs
108+ type : string
109+ default : .
110+ description : Target directories to scan with SAST tools. Multiple values should be separated with commas.
111+ - name : enable-package-registry-proxy
112+ default : ' true'
113+ description : Use the package registry proxy when prefetching dependencies
114+ type : string
107115 results :
108116 - description : " "
109117 name : IMAGE_URL
@@ -130,14 +138,16 @@ spec:
130138 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
131139 - name : CACHI2_ARTIFACT
132140 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
141+ - name : TARGET_DIRS
142+ value : $(params.sast-target-dirs)
133143 runAfter :
134144 - build-image-index
135145 taskRef :
136146 params :
137147 - name : name
138148 value : sast-snyk-check-oci-ta
139149 - name : bundle
140- value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4 @sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b
150+ value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.5 @sha256:91980bb3d6ba0b200a2030f2be0722da0fbc9338c0c6ff897d0005a2f1259a9b
141151 - name : kind
142152 value : task
143153 resolver : bundles
@@ -158,14 +168,16 @@ spec:
158168 value : $(params.output-image).prefetch
159169 - name : ociArtifactExpiresAfter
160170 value : $(params.image-expires-after)
171+ - name : enable-package-registry-proxy
172+ value : $(params.enable-package-registry-proxy)
161173 runAfter :
162174 - clone-repository
163175 taskRef :
164176 params :
165177 - name : name
166178 value : prefetch-dependencies-oci-ta
167179 - name : bundle
168- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2 @sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb
180+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3 @sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
169181 - name : kind
170182 value : task
171183 resolver : bundles
@@ -189,7 +201,7 @@ spec:
189201 - name : name
190202 value : apply-tags
191203 - name : bundle
192- value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2 @sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02
204+ value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3 @sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66
193205 - name : kind
194206 value : task
195207 resolver : bundles
@@ -206,7 +218,7 @@ spec:
206218 - name : name
207219 value : init
208220 - name : bundle
209- value : quay.io/konflux-ci/tekton-catalog/task-init:0.2 @sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5
221+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.4 @sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
210222 - name : kind
211223 value : task
212224 resolver : bundles
@@ -227,7 +239,7 @@ spec:
227239 - name : name
228240 value : git-clone-oci-ta
229241 - name : bundle
230- value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1 @sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf
242+ value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2 @sha256:52827a47564514f6accab971b8fad4f1c1cf59997507ed7c4e534615eeeae567
231243 - name : kind
232244 value : task
233245 resolver : bundles
@@ -280,7 +292,7 @@ spec:
280292 - name : name
281293 value : buildah-remote-oci-ta
282294 - name : bundle
283- value : quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4 @sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d
295+ value : quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.10 @sha256:ae1b7a3010b37c55b7702de7a9d3ab61410f7931d1a77f15b3809395d31a9346
284296 - name : kind
285297 value : task
286298 resolver : bundles
@@ -293,10 +305,6 @@ spec:
293305 params :
294306 - name : IMAGE
295307 value : $(params.output-image)
296- - name : COMMIT_SHA
297- value : $(tasks.clone-repository.results.commit)
298- - name : IMAGE_EXPIRES_AFTER
299- value : $(params.image-expires-after)
300308 - name : ALWAYS_BUILD_INDEX
301309 value : $(params.build-image-index)
302310 - name : IMAGES
@@ -309,7 +317,7 @@ spec:
309317 - name : name
310318 value : build-image-index
311319 - name : bundle
312- value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1 @sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e
320+ value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3 @sha256:0b4251ea0fab38be2b1441bea2788220d4cf2963ffb854a0ed90992fbabbe122
313321 - name : kind
314322 value : task
315323 resolver : bundles
@@ -335,7 +343,7 @@ spec:
335343 - name : name
336344 value : source-build-oci-ta
337345 - name : bundle
338- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f
346+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:d8115c74aed42fe9b1b3df149c534ced09f33c7bc6e51449bcaf8ec50699b8a0
339347 - name : kind
340348 value : task
341349 resolver : bundles
@@ -361,7 +369,7 @@ spec:
361369 - name : name
362370 value : deprecated-image-check
363371 - name : bundle
364- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012
372+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
365373 - name : kind
366374 value : task
367375 resolver : bundles
@@ -383,7 +391,7 @@ spec:
383391 - name : name
384392 value : clair-scan
385393 - name : bundle
386- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2 @sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759
394+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3 @sha256:312fb4d135e351bde38bcb14a7897b238d0aac19703b4e507c105f12b57836f1
387395 - name : kind
388396 value : task
389397 resolver : bundles
@@ -403,7 +411,7 @@ spec:
403411 - name : name
404412 value : ecosystem-cert-preflight-checks
405413 - name : bundle
406- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6
414+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
407415 - name : kind
408416 value : task
409417 resolver : bundles
@@ -430,7 +438,7 @@ spec:
430438 - name : name
431439 value : clamav-scan
432440 - name : bundle
433- value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802
441+ value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:567cb66bd2e1f4b58b9d4d756f3317fc62479e0b40aa0de66094b1f12d296cfc
434442 - name : kind
435443 value : task
436444 resolver : bundles
@@ -454,14 +462,16 @@ spec:
454462 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
455463 - name : CACHI2_ARTIFACT
456464 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
465+ - name : TARGET_DIRS
466+ value : $(params.sast-target-dirs)
457467 runAfter :
458468 - build-image-index
459469 taskRef :
460470 params :
461471 - name : name
462472 value : sast-shell-check-oci-ta
463473 - name : bundle
464- value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9
474+ value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
465475 - name : kind
466476 value : task
467477 resolver : bundles
@@ -480,14 +490,16 @@ spec:
480490 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
481491 - name : CACHI2_ARTIFACT
482492 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
493+ - name : TARGET_DIRS
494+ value : $(params.sast-target-dirs)
483495 runAfter :
484496 - build-image-index
485497 taskRef :
486498 params :
487499 - name : name
488500 value : sast-unicode-check-oci-ta
489501 - name : bundle
490- value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3 @sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
502+ value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4 @sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
491503 - name : kind
492504 value : task
493505 resolver : bundles
@@ -515,7 +527,7 @@ spec:
515527 - name : name
516528 value : push-dockerfile-oci-ta
517529 - name : bundle
518- value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1 @sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430
530+ value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3 @sha256:581ddbb0b8dc388678cea65b9b3b6265db59f6de1d473006fb84fb0b456886bd
519531 - name : kind
520532 value : task
521533 resolver : bundles
@@ -532,7 +544,7 @@ spec:
532544 - name : name
533545 value : rpms-signature-scan
534546 - name : bundle
535- value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:1b6c20ab3dbfb0972803d3ebcb2fa72642e59400c77bd66dfd82028bdd09e120
547+ value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
536548 - name : kind
537549 value : task
538550 resolver : bundles
0 commit comments