diff --git a/task/buildah-remote/0.1/buildah-remote.yaml b/task/buildah-remote/0.1/buildah-remote.yaml index dd8c8f0520..58e0a1dac5 100644 --- a/task/buildah-remote/0.1/buildah-remote.yaml +++ b/task/buildah-remote/0.1/buildah-remote.yaml @@ -361,7 +361,7 @@ spec: readOnly: true workingDir: $(workspaces.source.path) - computeResources: {} - image: quay.io/redhat-appstudio/syft:v0.105.1@sha256:1910b829997650c696881e5fc2fc654ddf3184c27edb1b2024e9cb2ba51ac431 + image: quay.io/redhat-appstudio/syft:v1.2.0@sha256:f608cdf9159270124cacfb8e1b2d17fcae05dd869d1a339dd316ede8ad6e5063 name: sbom-syft-generate script: | syft dir:$(workspaces.source.path)/source --output cyclonedx-json=$(workspaces.source.path)/sbom-source.json diff --git a/task/buildah/0.1/buildah.yaml b/task/buildah/0.1/buildah.yaml index b38c665ee3..7587036c2e 100644 --- a/task/buildah/0.1/buildah.yaml +++ b/task/buildah/0.1/buildah.yaml @@ -277,7 +277,7 @@ spec: workingDir: $(workspaces.source.path) - name: sbom-syft-generate - image: quay.io/redhat-appstudio/syft:v0.105.1@sha256:1910b829997650c696881e5fc2fc654ddf3184c27edb1b2024e9cb2ba51ac431 + image: quay.io/redhat-appstudio/syft:v1.2.0@sha256:f608cdf9159270124cacfb8e1b2d17fcae05dd869d1a339dd316ede8ad6e5063 # Respect Syft configuration if the user has it in the root of their repository # (need to set the workdir, see https://github.com/anchore/syft/issues/2465) workingDir: $(workspaces.source.path)/source diff --git a/task/rpm-ostree/0.1/rpm-ostree.yaml b/task/rpm-ostree/0.1/rpm-ostree.yaml index 59e938ed93..d08190dfda 100644 --- a/task/rpm-ostree/0.1/rpm-ostree.yaml +++ b/task/rpm-ostree/0.1/rpm-ostree.yaml @@ -196,7 +196,7 @@ spec: name: ssh readOnly: true workingDir: $(workspaces.source.path) - - image: quay.io/redhat-appstudio/syft:v0.105.1@sha256:1910b829997650c696881e5fc2fc654ddf3184c27edb1b2024e9cb2ba51ac431 + - image: quay.io/redhat-appstudio/syft:v1.2.0@sha256:f608cdf9159270124cacfb8e1b2d17fcae05dd869d1a339dd316ede8ad6e5063 # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting # the cluster will set imagePullPolicy to IfNotPresent # also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released. diff --git a/task/s2i-java/0.1/s2i-java.yaml b/task/s2i-java/0.1/s2i-java.yaml index 88c72da706..934652ff0f 100644 --- a/task/s2i-java/0.1/s2i-java.yaml +++ b/task/s2i-java/0.1/s2i-java.yaml @@ -151,7 +151,7 @@ spec: name: gen-source workingDir: /gen-source - - image: quay.io/redhat-appstudio/syft:v0.105.1@sha256:1910b829997650c696881e5fc2fc654ddf3184c27edb1b2024e9cb2ba51ac431 + - image: quay.io/redhat-appstudio/syft:v1.2.0@sha256:f608cdf9159270124cacfb8e1b2d17fcae05dd869d1a339dd316ede8ad6e5063 # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting # the cluster will set imagePullPolicy to IfNotPresent # also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released. diff --git a/task/s2i-nodejs/0.1/s2i-nodejs.yaml b/task/s2i-nodejs/0.1/s2i-nodejs.yaml index 74f846331d..0a605cfe4c 100644 --- a/task/s2i-nodejs/0.1/s2i-nodejs.yaml +++ b/task/s2i-nodejs/0.1/s2i-nodejs.yaml @@ -135,7 +135,7 @@ spec: name: gen-source workingDir: /gen-source - - image: quay.io/redhat-appstudio/syft:v0.105.1@sha256:1910b829997650c696881e5fc2fc654ddf3184c27edb1b2024e9cb2ba51ac431 + - image: quay.io/redhat-appstudio/syft:v1.2.0@sha256:f608cdf9159270124cacfb8e1b2d17fcae05dd869d1a339dd316ede8ad6e5063 # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting # the cluster will set imagePullPolicy to IfNotPresent # also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.