diff --git a/task/buildah-rhtap/0.1/buildah-rhtap.yaml b/task/buildah-rhtap/0.1/buildah-rhtap.yaml index 7b4ce2c180..42dc88cea8 100644 --- a/task/buildah-rhtap/0.1/buildah-rhtap.yaml +++ b/task/buildah-rhtap/0.1/buildah-rhtap.yaml @@ -130,7 +130,7 @@ spec: workingDir: $(workspaces.source.path) - name: generate-sboms - image: registry.redhat.io/rh-syft-tech-preview/syft-rhel9:1.0.1@sha256:27c268d678103a27b6964c2cd5169040941b7304d0078f9727789ffb8ffba370 + image: registry.redhat.io/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c # Respect Syft configuration if the user has it in the root of their repository # (need to set the workdir, see https://github.com/anchore/syft/issues/2465) workingDir: $(workspaces.source.path)/source diff --git a/task/upload-sbom-to-trustification/0.1/upload-sbom-to-trustification.yaml b/task/upload-sbom-to-trustification/0.1/upload-sbom-to-trustification.yaml index 2f2d919ccb..a1b9eeca72 100644 --- a/task/upload-sbom-to-trustification/0.1/upload-sbom-to-trustification.yaml +++ b/task/upload-sbom-to-trustification/0.1/upload-sbom-to-trustification.yaml @@ -137,7 +137,7 @@ spec: # Needs syft, which is in a different image => has to be a separate step - name: convert-sboms-if-needed - image: registry.redhat.io/rh-syft-tech-preview/syft-rhel9:1.0.1@sha256:27c268d678103a27b6964c2cd5169040941b7304d0078f9727789ffb8ffba370 + image: registry.redhat.io/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c script: | #!/usr/bin/env bash set -o errexit -o nounset -o pipefail