bug fixed

This commit is contained in:
병준 박 2025-04-08 18:09:13 +00:00
parent 5331d73fac
commit 80f7d08811

View File

@ -1,5 +1,5 @@
--- ---
apiVersion: tekton.dev/v1beta1 apiVersion: tekton.dev/v1
kind: Task kind: Task
metadata: metadata:
name: git-clone-checkout name: git-clone-checkout
@ -101,15 +101,6 @@ spec:
value: $(workspaces.ssl-ca-directory.bound) value: $(workspaces.ssl-ca-directory.bound)
- name: WORKSPACE_SSL_CA_DIRECTORY_PATH - name: WORKSPACE_SSL_CA_DIRECTORY_PATH
value: $(workspaces.ssl-ca-directory.path) value: $(workspaces.ssl-ca-directory.path)
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
script: | script: |
#!/usr/bin/env sh #!/usr/bin/env sh
set -eu set -eu
@ -153,3 +144,16 @@ spec:
printf "%s" "${RESULT_COMMITTER_DATE}" > "$(results.committer-date.path)" printf "%s" "${RESULT_COMMITTER_DATE}" > "$(results.committer-date.path)"
printf "%s" "${RESULT_SHA}" > "$(results.commit.path)" printf "%s" "${RESULT_SHA}" > "$(results.commit.path)"
printf "%s" "${PARAM_URL}" > "$(results.url.path)" printf "%s" "${PARAM_URL}" > "$(results.url.path)"
podTemplate:
securityContext:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
container:
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true
capabilities:
drop:
- ALL