feat(STONEINTG-1020): make snyk scan all files

[jsztuka]

This change main goal is to make Snyk scan dependencies to meet ProdSec scanning requirements.
It is a breaking change, thats the reason for newer version of the check itself.

Before you complete this pull request ...

Look for any open pull requests in the repository with the title "e2e-tests update" and
see if there are recent e2e-tests updates that will be applicable to your change.

[chipspeak]

LGTM

[jsztuka]

/retest

[jsztuka]

Duno why konflux is unable to pull docker.io/cytopia/yamllint:1.26@sha256:1bf8270a671a2e5f2fea8ac2e80164d627e0c5fa083759862bbde80628f942b2

[chmeliik]

Duno why konflux is unable to pull docker.io/cytopia/yamllint:1.26@sha256:1bf8270a671a2e5f2fea8ac2e80164d627e0c5fa083759862bbde80628f942b2

I've seen this in other PRs as well, we may have hit the docker.io rate limit 😢

[dheerajodha]

I've seen this in other PRs as well, we may have hit the docker.io rate limit 😢

@chmeliik how do we fix this? 😢 or do we need to wait till the limit is reset?

[lcarva]

I think this will work:

1. Create a Secret in the konflux-ci namespace that contains a token with read access to docker.io. This token doesn't necessarily need to be from a paid account. Any token, instead of anonymous pulls, has a significantly higher rate limit.
2. Link the Secret to the appstudio-pipeline ServiceAccount with --for=mount,pull.

[chmeliik]

I think this will work:

1. Create a Secret in the `konflux-ci` namespace that contains a token with read access to docker.io. This token doesn't necessarily need to be from a paid account. Any token, instead of anonymous pulls, has a significantly higher rate limit.

2. Link the Secret to the `appstudio-pipeline` ServiceAccount with `--for=mount,pull`.

+1, if you're going to do this please do so via ExternalSecrets (like https://github.com/redhat-appstudio/infra-deployments/blob/main/components/konflux-ci/production/redhat-appstudio-tekton-catalog-build-definitions-pull-secret.yaml)

Or wait until tomorrow for the build team to come back online

[lcarva]

+1, if you're going to do this please do so via ExternalSecrets (like https://github.com/redhat-appstudio/infra-deployments/blob/main/components/konflux-ci/production/redhat-appstudio-tekton-catalog-build-definitions-pull-secret.yaml)

Don't worry. I have no access here 🥲

[jsztuka]

/retest

[jsztuka]

Looks like that worked, thanks @chmeliik !

[chmeliik]

Looks like that worked, thanks @chmeliik !

Just for the record, we didn't do anything 😄

The rate limit probably just reset

[dirgim]

LGTM