task/rpm-ostree: respect user config for Syft

See the corresponding commit for the buildah task Note that rpm-ostree does not currently support hermetic builds, which makes the tradeoffs (allowing the user to cause false negatives) more severe. Support for hermetic builds should eventually be added though, so this concern is temporary. Signed-off-by: Adam Cmiel <[email protected]>
konflux-ci · Mar 1, 2024 · 92f0349 · 92f0349
1 parent 38575d2
commit 92f0349
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/task/rpm-ostree/0.1/rpm-ostree.yaml b/task/rpm-ostree/0.1/rpm-ostree.yaml
@@ -156,6 +156,9 @@ spec:
         memory: 6Gi
       requests:
         memory: 6Gi
+    # Respect Syft configuration if the user has it in the root of their repository
+    # (need to set the workdir, see https://github.com/anchore/syft/issues/2465)
+    workingDir: $(workspaces.source.path)/source
     script: |
       syft oci-dir:/var/lib/containers/rhtap-final-image --output cyclonedx-json=$(workspaces.source.path)/sbom-cyclonedx.json
     volumeMounts: