example checkov workflow

examples/pipelines/checkov-project/kustomization.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+nameSuffix: -checkov-project
+components:
+  - pkg:helm/dracon-oss-components/base
+  - pkg:helm/dracon-oss-components/git-clone
+  - pkg:helm/dracon-oss-components/producer-checkov
+  - pkg:helm/dracon-oss-components/producer-aggregator
+  - pkg:helm/dracon-oss-components/enricher-codeowners
+  - pkg:helm/dracon-oss-components/enricher-aggregator
+  - pkg:helm/dracon-oss-components/consumer-stdout-json

examples/pipelines/checkov-project/pipelinerun.yaml

@@ -0,0 +1,24 @@
+---
+apiVersion: tekton.dev/v1beta1
+kind: PipelineRun
+metadata:
+  generateName: dracon-checkov-project-
+  namespace: dracon
+spec:
+  pipelineRef:
+    name: dracon-checkov-project
+  params:
+  - name: git-clone-url
+    value:  https://github.com/bridgecrewio/cfngoat
+  - name: producer-checkov-cyclonedx-target-override
+    value: "pkg:terraform/bridgecrewio/cfngoat"
+  workspaces:
+  - name: output
+    subPath: source-code
+    volumeClaimTemplate:
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        resources:
+          requests:
+            storage: 1Gi