fix(KONFLUX-3663): upload SAST results to quay.io

Configure the SAST task to upload SARIF results to quay.io for long-term storage Signed-off-by: ccronca <[email protected]>
redhat-appstudio · Aug 14, 2024 · 6231499 · 6231499
1 parent 14310cc
commit 6231499
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/.tekton/rh-syft-pull-request.yaml b/.tekton/rh-syft-pull-request.yaml
@@ -325,10 +325,14 @@ spec:
         - "false"
     - name: sast-snyk-check
       runAfter:
-      - clone-repository
+      - build-container
       params:
       - name: ARGS
         value: --report --project-name=redhat-appstudio/rh-syft
+      - name: image-digest
+        value: $(tasks.build-container.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-container.results.IMAGE_URL)
       taskRef:
         params:
         - name: name

diff --git a/.tekton/rh-syft-push.yaml b/.tekton/rh-syft-push.yaml
@@ -322,10 +322,14 @@ spec:
         - "false"
     - name: sast-snyk-check
       runAfter:
-      - clone-repository
+      - build-container
       params:
       - name: ARGS
         value: --report --project-name=redhat-appstudio/rh-syft
+      - name: image-digest
+        value: $(tasks.build-container.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-container.results.IMAGE_URL)
       taskRef:
         params:
         - name: name