Enable snyk reports only on push

Author: jotak

.tekton/network-observability-operator-bundle-ystream-push.yaml

@@ -40,6 +40,8 @@ spec:
     value: bundle.Dockerfile.downstream
   - name: prefetch-input
     value: '{"type":"pip", "path":"."}'
+  - name: snyk-args
+    value: "--project-name=netobserv-bundle --report --org=824715e7-b597-4123-bdb7-ba8abc3d3b2f"
   pipelineRef:
     name: build-bundle-pipeline
   taskRunTemplate:

.tekton/network-observability-operator-ystream-push.yaml

@@ -45,6 +45,8 @@ spec:
     value: Dockerfile-args.downstream
   - name: dockerfile
     value: ./Dockerfile.downstream
+  - name: snyk-args
+    value: "--project-name=netobserv-operator --report --org=824715e7-b597-4123-bdb7-ba8abc3d3b2f"
   pipelineRef:
     name: build-pipeline
   taskRunTemplate:

.tekton/pipeline-bundle-ref.yaml

@@ -65,6 +65,10 @@ spec:
     default: 'false'
     description: Enable cache proxy configuration
     type: string
+  - name: snyk-args
+    default: ''
+    description: Snyk arguments, e.g. for report upload
+    type: string
   results:
   - description: ""
     name: IMAGE_URL
@@ -278,7 +282,7 @@ spec:
     - name: image-url
       value: $(tasks.build-container.results.IMAGE_URL)
     - name: ARGS
-      value: "--project-name=netobserv-bundle --report --org=824715e7-b597-4123-bdb7-ba8abc3d3b2f"
+      value: $(params.snyk-args)
     runAfter:
     - build-container
     taskRef:

.tekton/pipeline-ref.yaml

@@ -79,6 +79,10 @@ spec:
     default: docker
     type: string
     description: The format for the resulting image's mediaType. Valid values are oci or docker.
+  - name: snyk-args
+    default: ''
+    description: Snyk arguments, e.g. for report upload
+    type: string
   results:
   - description: ""
     name: IMAGE_URL
@@ -383,7 +387,7 @@ spec:
     - name: CACHI2_ARTIFACT
       value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
     - name: ARGS
-      value: "--project-name=netobserv-operator --report --org=824715e7-b597-4123-bdb7-ba8abc3d3b2f"
+      value: $(params.snyk-args)
     runAfter:
     - build-image-index
     taskRef: