From 2dbe1163018e4522097a8a1af9434ea45a357bfe Mon Sep 17 00:00:00 2001
From: BAK BYEONG JUN <richard.bak@loafle.com>
Date: Sat, 12 Apr 2025 13:16:20 +0000
Subject: [PATCH] init

---
 tasks/docker-registry/task.yaml    | 75 ++++++++++++++++++------------
 tasks/git-gitops-sync/task.yaml    |  2 +-
 tasks/nodejs-nx-version/task.yaml  |  2 +-
 tasks/pybuild/task.yaml            |  2 +-
 tasks/pylint/task.yaml             |  2 +-
 tasks/pypi/task.yaml               |  2 +-
 tasks/pytest/task.yaml             |  2 +-
 tasks/pyversion/task.yaml          |  2 +-
 tasks/sonarqube-analysis/taks.yaml | 48 +++++++++++++++++++
 9 files changed, 99 insertions(+), 38 deletions(-)
 create mode 100644 tasks/sonarqube-analysis/taks.yaml

diff --git a/tasks/docker-registry/task.yaml b/tasks/docker-registry/task.yaml
index e7b55d4..10fabe0 100644
--- a/tasks/docker-registry/task.yaml
+++ b/tasks/docker-registry/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: docker-registry
@@ -39,38 +39,51 @@ spec:
       description: Final pushed image URL with tag (e.g. registry/app:v0.2.0)
 
   steps:
-    - name: write-docker-config
-      image: alpine:3.18
-      workingDir: /workspace/source
-      script: |
-        #!/bin/sh
-        set -e
-
-        if [ -n "$(params.subdirectory)" ]; then
-          cd "$(params.subdirectory)"
-        fi
-
-        IMAGE="$(params.imageName):$(params.tag)"
-        USERNAME=$(cat /workspace/docker-auth/username)
-        PASSWORD=$(cat /workspace/docker-auth/password)
-        REGISTRY=$(echo "$IMAGE" | cut -d/ -f1)
-
-        echo "🔐 Creating Docker config for $REGISTRY..."
-        mkdir -p /tekton/home/.docker
-        echo "{\"auths\": {\"$REGISTRY\": {\"auth\": \"$(echo -n "$USERNAME:$PASSWORD" | base64)\"}}}" \
-          > /tekton/home/.docker/config.json
-
-    - name: kaniko-build
-      image: gcr.io/kaniko-project/executor:v1.23.2
+    - name: build-and-push
+      image: bash:5
       workingDir: /workspace/source
       env:
         - name: DOCKER_CONFIG
           value: /tekton/home/.docker
-      args:
-        - --dockerfile=$(params.dockerfile)
-        - --context=$(params.context)
-        - --destination=$(params.imageName):$(params.tag)
-        - --skip-tls-verify
-        - --reproducible
-        - --verbosity=info
+      script: |
+        #!/usr/bin/env bash
+        set -euo pipefail
+
+        if [[ -n "$(params.subdirectory)" ]]; then
+          cd "$(params.subdirectory)"
+        fi
+
+        IMAGE="$(params.imageName):$(params.tag)"
+        echo "📦 Using image: $IMAGE"
+        echo -n "$IMAGE" > /tekton/results/imageUrl
+
+        USERNAME=$(cat /workspace/docker-auth/username)
+        PASSWORD=$(cat /workspace/docker-auth/password)
+        REGISTRY=$(cut -d/ -f1 <<< "$IMAGE")
+
+        echo "🔐 Writing Docker config for $REGISTRY..."
+        mkdir -p "$DOCKER_CONFIG"
+        cat > "$DOCKER_CONFIG/config.json" <<EOF
+        {
+          "auths": {
+            "$REGISTRY": {
+              "auth": "$(echo -n "$USERNAME:$PASSWORD" | base64)"
+            }
+          }
+        }
+        EOF
+
+        echo "📥 Downloading Kaniko executor..."
+        curl -sSL -o /kaniko.tar.gz https://github.com/GoogleContainerTools/kaniko/releases/download/v1.23.2/executor-linux-amd64.tar.gz
+        mkdir -p /kaniko && tar -xzf /kaniko.tar.gz -C /kaniko
+        chmod +x /kaniko/executor
+
+        echo "🚀 Building and pushing image..."
+        /kaniko/executor \
+          --dockerfile="$(params.dockerfile)" \
+          --context="$(params.context)" \
+          --destination="$IMAGE" \
+          --skip-tls-verify \
+          --reproducible \
+          --verbosity=info
 
diff --git a/tasks/git-gitops-sync/task.yaml b/tasks/git-gitops-sync/task.yaml
index 9d4fcfa..a616585 100644
--- a/tasks/git-gitops-sync/task.yaml
+++ b/tasks/git-gitops-sync/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: git-gitops-sync
diff --git a/tasks/nodejs-nx-version/task.yaml b/tasks/nodejs-nx-version/task.yaml
index f814c8f..158325f 100644
--- a/tasks/nodejs-nx-version/task.yaml
+++ b/tasks/nodejs-nx-version/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: nx-nodejs-version
diff --git a/tasks/pybuild/task.yaml b/tasks/pybuild/task.yaml
index 12c3490..5cc1ba8 100644
--- a/tasks/pybuild/task.yaml
+++ b/tasks/pybuild/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: pybuild
diff --git a/tasks/pylint/task.yaml b/tasks/pylint/task.yaml
index 435daca..bd45ce0 100644
--- a/tasks/pylint/task.yaml
+++ b/tasks/pylint/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: pylint
diff --git a/tasks/pypi/task.yaml b/tasks/pypi/task.yaml
index c5aa6a2..5080f77 100644
--- a/tasks/pypi/task.yaml
+++ b/tasks/pypi/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: pypi
diff --git a/tasks/pytest/task.yaml b/tasks/pytest/task.yaml
index 79cc788..52f27a1 100644
--- a/tasks/pytest/task.yaml
+++ b/tasks/pytest/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: pytest
diff --git a/tasks/pyversion/task.yaml b/tasks/pyversion/task.yaml
index 205b4ed..abfc4f9 100644
--- a/tasks/pyversion/task.yaml
+++ b/tasks/pyversion/task.yaml
@@ -1,4 +1,4 @@
-apiVersion: tekton.dev/v1beta1
+apiVersion: tekton.dev/v1
 kind: Task
 metadata:
   name: pyversion
diff --git a/tasks/sonarqube-analysis/taks.yaml b/tasks/sonarqube-analysis/taks.yaml
new file mode 100644
index 0000000..548936a
--- /dev/null
+++ b/tasks/sonarqube-analysis/taks.yaml
@@ -0,0 +1,48 @@
+apiVersion: tekton.dev/v1
+kind: Task
+metadata:
+  name: sonarqube-analysis
+spec:
+  params:
+    - name: subdirectory
+      type: string
+      default: ""
+      description: Subdirectory within workspace containing the source (if any)
+
+    - name: sonarHostUrl
+      type: string
+      default: "https://sonarqube.unbox-x.net"
+      description: SonarQube server URL
+
+    - name: projectKey
+      type: string
+      description: SonarQube project key
+
+  workspaces:
+    - name: source
+      description: Workspace with source code (e.g. from git-clone)
+
+    - name: sonar-auth
+      description: |
+        Workspace containing authentication token (file: `token`)
+
+  steps:
+    - name: sonar-scan
+      image: sonarsource/sonar-scanner-cli:5
+      workingDir: /workspace/source
+      script: |
+        #!/bin/sh
+        set -e
+
+        if [ -n "$(params.subdirectory)" ]; then
+          cd "$(params.subdirectory)"
+        fi
+
+        SONAR_TOKEN=$(cat /workspace/sonar-auth/token)
+
+        echo "📡 Running SonarQube analysis on project $(params.projectKey)..."
+
+        sonar-scanner \
+          -Dsonar.projectKey=$(params.projectKey) \
+          -Dsonar.host.url=$(params.sonarHostUrl) \
+          -Dsonar.login=$SONAR_TOKEN