Skip to content

Commit feb3c99

Browse files
pastequopastequo
authored
MGMT-20149: Add required sast tasks for Konflux (#391)
1 parent 4ca3dc5 commit feb3c99

2 files changed

+223
-0
lines changed

‎.tekton/prow-jobs-scraper-saas-main-pull-request.yaml

+112
Original file line numberDiff line numberDiff line change
@@ -385,6 +385,118 @@ spec:
385385
operator: in
386386
values:
387387
- "false"
388+
389+
- name: sast-coverity-check
390+
params:
391+
- name: image-url
392+
value: $(tasks.build-container.results.IMAGE_URL)
393+
- name: IMAGE
394+
value: $(params.output-image)
395+
- name: DOCKERFILE
396+
value: $(params.dockerfile)
397+
- name: CONTEXT
398+
value: $(params.path-context)
399+
- name: HERMETIC
400+
value: $(params.hermetic)
401+
- name: PREFETCH_INPUT
402+
value: $(params.prefetch-input)
403+
- name: IMAGE_EXPIRES_AFTER
404+
value: $(params.image-expires-after)
405+
- name: COMMIT_SHA
406+
value: $(tasks.clone-repository.results.commit)
407+
- name: BUILD_ARGS
408+
value:
409+
- $(params.build-args[*])
410+
- name: BUILD_ARGS_FILE
411+
value: $(params.build-args-file)
412+
runAfter:
413+
- coverity-availability-check
414+
taskRef:
415+
params:
416+
- name: name
417+
value: sast-coverity-check
418+
- name: bundle
419+
value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check:0.2@sha256:d4fa3576baa2a7066d2a1840057836b90caee4d7ddf302bc1e93949cf8c12e04
420+
- name: kind
421+
value: task
422+
resolver: bundles
423+
when:
424+
- input: $(params.skip-checks)
425+
operator: in
426+
values:
427+
- "false"
428+
- input: $(tasks.coverity-availability-check.results.STATUS)
429+
operator: in
430+
values:
431+
- success
432+
workspaces:
433+
- name: source
434+
workspace: workspace
435+
- name: coverity-availability-check
436+
runAfter:
437+
- build-container
438+
taskRef:
439+
params:
440+
- name: name
441+
value: coverity-availability-check
442+
- name: bundle
443+
value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:0b35292eed661c5e3ca307c0ba7f594d17555db2a1da567903b0b47697fa23ed
444+
- name: kind
445+
value: task
446+
resolver: bundles
447+
when:
448+
- input: $(params.skip-checks)
449+
operator: in
450+
values:
451+
- "false"
452+
- name: sast-shell-check
453+
params:
454+
- name: image-digest
455+
value: $(tasks.build-container.results.IMAGE_DIGEST)
456+
- name: image-url
457+
value: $(tasks.build-container.results.IMAGE_URL)
458+
runAfter:
459+
- build-container
460+
taskRef:
461+
params:
462+
- name: name
463+
value: sast-shell-check
464+
- name: bundle
465+
value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:77724eb55158ed966316e1d478f7e208dbf98202231d8ebf20e0f55ad92f667c
466+
- name: kind
467+
value: task
468+
resolver: bundles
469+
when:
470+
- input: $(params.skip-checks)
471+
operator: in
472+
values:
473+
- "false"
474+
workspaces:
475+
- name: workspace
476+
workspace: workspace
477+
- name: sast-unicode-check
478+
params:
479+
- name: image-url
480+
value: $(tasks.build-container.results.IMAGE_URL)
481+
runAfter:
482+
- build-container
483+
taskRef:
484+
params:
485+
- name: name
486+
value: sast-unicode-check
487+
- name: bundle
488+
value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.1@sha256:b1a9af196a79baa75632ef494eb6db987f57e870d882d47f5b495e1441c01e3b
489+
- name: kind
490+
value: task
491+
resolver: bundles
492+
when:
493+
- input: $(params.skip-checks)
494+
operator: in
495+
values:
496+
- "false"
497+
workspaces:
498+
- name: workspace
499+
workspace: workspace
388500
- name: apply-tags
389501
params:
390502
- name: IMAGE

‎.tekton/prow-jobs-scraper-saas-main-push.yaml

+111
Original file line numberDiff line numberDiff line change
@@ -382,6 +382,117 @@ spec:
382382
operator: in
383383
values:
384384
- "false"
385+
- name: sast-coverity-check
386+
params:
387+
- name: image-url
388+
value: $(tasks.build-container.results.IMAGE_URL)
389+
- name: IMAGE
390+
value: $(params.output-image)
391+
- name: DOCKERFILE
392+
value: $(params.dockerfile)
393+
- name: CONTEXT
394+
value: $(params.path-context)
395+
- name: HERMETIC
396+
value: $(params.hermetic)
397+
- name: PREFETCH_INPUT
398+
value: $(params.prefetch-input)
399+
- name: IMAGE_EXPIRES_AFTER
400+
value: $(params.image-expires-after)
401+
- name: COMMIT_SHA
402+
value: $(tasks.clone-repository.results.commit)
403+
- name: BUILD_ARGS
404+
value:
405+
- $(params.build-args[*])
406+
- name: BUILD_ARGS_FILE
407+
value: $(params.build-args-file)
408+
runAfter:
409+
- coverity-availability-check
410+
taskRef:
411+
params:
412+
- name: name
413+
value: sast-coverity-check
414+
- name: bundle
415+
value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check:0.2@sha256:d4fa3576baa2a7066d2a1840057836b90caee4d7ddf302bc1e93949cf8c12e04
416+
- name: kind
417+
value: task
418+
resolver: bundles
419+
when:
420+
- input: $(params.skip-checks)
421+
operator: in
422+
values:
423+
- "false"
424+
- input: $(tasks.coverity-availability-check.results.STATUS)
425+
operator: in
426+
values:
427+
- success
428+
workspaces:
429+
- name: source
430+
workspace: workspace
431+
- name: coverity-availability-check
432+
runAfter:
433+
- build-container
434+
taskRef:
435+
params:
436+
- name: name
437+
value: coverity-availability-check
438+
- name: bundle
439+
value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:0b35292eed661c5e3ca307c0ba7f594d17555db2a1da567903b0b47697fa23ed
440+
- name: kind
441+
value: task
442+
resolver: bundles
443+
when:
444+
- input: $(params.skip-checks)
445+
operator: in
446+
values:
447+
- "false"
448+
- name: sast-shell-check
449+
params:
450+
- name: image-digest
451+
value: $(tasks.build-container.results.IMAGE_DIGEST)
452+
- name: image-url
453+
value: $(tasks.build-container.results.IMAGE_URL)
454+
runAfter:
455+
- build-container
456+
taskRef:
457+
params:
458+
- name: name
459+
value: sast-shell-check
460+
- name: bundle
461+
value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:77724eb55158ed966316e1d478f7e208dbf98202231d8ebf20e0f55ad92f667c
462+
- name: kind
463+
value: task
464+
resolver: bundles
465+
when:
466+
- input: $(params.skip-checks)
467+
operator: in
468+
values:
469+
- "false"
470+
workspaces:
471+
- name: workspace
472+
workspace: workspace
473+
- name: sast-unicode-check
474+
params:
475+
- name: image-url
476+
value: $(tasks.build-container.results.IMAGE_URL)
477+
runAfter:
478+
- build-container
479+
taskRef:
480+
params:
481+
- name: name
482+
value: sast-unicode-check
483+
- name: bundle
484+
value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.1@sha256:b1a9af196a79baa75632ef494eb6db987f57e870d882d47f5b495e1441c01e3b
485+
- name: kind
486+
value: task
487+
resolver: bundles
488+
when:
489+
- input: $(params.skip-checks)
490+
operator: in
491+
values:
492+
- "false"
493+
workspaces:
494+
- name: workspace
495+
workspace: workspace
385496
- name: apply-tags
386497
params:
387498
- name: IMAGE

0 commit comments

Comments
 (0)