add dependency check to the sca kustomization

smithy-security · Aug 22, 2024 · 9005e8a · 9005e8a
1 parent 40508f0
commit 9005e8a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/components/producers/dependency-check/task.yaml b/components/producers/dependency-check/task.yaml
@@ -16,7 +16,7 @@ spec:
       description: The workspace containing the source-code to scan.
   steps:
   - name: run-dependency-check
-    image: docker.io/owasp/dependency-check:7.4.4
+    image: owasp/dependency-check:10.0.3
     command: [/usr/share/dependency-check/bin/dependency-check.sh]
     args:
     - -f

diff --git a/examples/pipelines/sca-project/kustomization.yaml b/examples/pipelines/sca-project/kustomization.yaml
@@ -5,6 +5,7 @@ nameSuffix: -sca-project
 components:
   - pkg:helm/dracon-oss-components/base
   - pkg:helm/dracon-oss-components/producer-docker-trivy
+  - pkg:helm/dracon-oss-components/producer-dependency-check
   - pkg:helm/dracon-oss-components/producer-aggregator
   - pkg:helm/dracon-oss-components/enricher-codeowners
   - pkg:helm/dracon-oss-components/enricher-aggregator