diff --git a/task/sast-shell-check-oci-ta/0.1/README.md b/task/sast-shell-check-oci-ta/0.1/README.md index d7f6ef3a66..5b7f99906b 100644 --- a/task/sast-shell-check-oci-ta/0.1/README.md +++ b/task/sast-shell-check-oci-ta/0.1/README.md @@ -9,7 +9,7 @@ ShellCheck is a static analysis tool, gives warnings and suggestions for bash/sh |CACHI2_ARTIFACT|The Trusted Artifact URI pointing to the artifact with the prefetched dependencies.|""|false| |IMP_FINDINGS_ONLY|Whether to include important findings only|true|false| |KFP_GIT_URL|git repository to download known false positives files from|""|false| -|PROJECT_NVR|Name-Version-Release (NVR) of the scanned project, used to find path exclusions|""|false| +|PROJECT_NAME|Name of the scanned project, used to find path exclusions. By default, the Konflux component name will be used.|""|false| |RECORD_EXCLUDED|Whether to record the excluded findings (default to false). If `true`, the excluded findings will be stored in `excluded-findings.json`. |false|false| |SOURCE_ARTIFACT|The Trusted Artifact URI pointing to the artifact with the application source code.||true| |caTrustConfigMapKey|The name of the key in the ConfigMap that contains the CA bundle data.|ca-bundle.crt|false| diff --git a/task/sast-shell-check-oci-ta/0.1/sast-shell-check-oci-ta.yaml b/task/sast-shell-check-oci-ta/0.1/sast-shell-check-oci-ta.yaml index 4dbdeafe37..7bd1075432 100644 --- a/task/sast-shell-check-oci-ta/0.1/sast-shell-check-oci-ta.yaml +++ b/task/sast-shell-check-oci-ta/0.1/sast-shell-check-oci-ta.yaml @@ -27,9 +27,9 @@ spec: from type: string default: "" - - name: PROJECT_NVR - description: Name-Version-Release (NVR) of the scanned project, used - to find path exclusions + - name: PROJECT_NAME + description: Name of the scanned project, used to find path exclusions. + By default, the Konflux component name will be used. type: string default: "" - name: RECORD_EXCLUDED @@ -89,8 +89,8 @@ spec: env: - name: KFP_GIT_URL value: $(params.KFP_GIT_URL) - - name: PROJECT_NVR - value: $(params.PROJECT_NVR) + - name: PROJECT_NAME + value: $(params.PROJECT_NAME) - name: RECORD_EXCLUDED value: $(params.RECORD_EXCLUDED) - name: IMP_FINDINGS_ONLY @@ -157,9 +157,9 @@ spec: --kfp-git-url="${KFP_GIT_URL}" ) - # Append --project-nvr option if PROJECT_NVR is set - if [ -n "${PROJECT_NVR}" ]; then - csfilter_kfp_cmd+=(--project-nvr="${PROJECT_NVR}") + # Append --project-nvr option if PROJECT_NAME is set + if [ -n "${PROJECT_NAME}" ]; then + csfilter_kfp_cmd+=(--project-nvr="${PROJECT_NAME}") fi if [[ "${RECORD_EXCLUDED}" == "true" ]]; then