task/rpm-ostree: respect user config for Syft

See the corresponding commit for the buildah task Note that rpm-ostree does not currently support hermetic builds, which makes the tradeoffs (allowing the user to cause false negatives) more severe. Support for hermetic builds should eventually be added though, so this concern is temporary. Signed-off-by: Adam Cmiel <[email protected]>
konflux-ci · Mar 7, 2024 · c35e315 · c35e315
1 parent ccc43b8
commit c35e315
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/task/rpm-ostree/0.1/rpm-ostree.yaml b/task/rpm-ostree/0.1/rpm-ostree.yaml
@@ -156,6 +156,9 @@ spec:
         memory: 6Gi
       requests:
         memory: 6Gi
+    # Respect Syft configuration if the user has it in the root of their repository
+    # (need to set the workdir, see https://github.com/anchore/syft/issues/2465)
+    workingDir: $(workspaces.source.path)/source
     script: |
       syft oci-dir:/var/lib/containers/rhtap-final-image --output cyclonedx-json=$(workspaces.source.path)/sbom-cyclonedx.json
     volumeMounts: