[gferreir]

Changes

API version bump for 11 security and scanning tasks, continuing the
v1beta1 → v1 migration tracked in #1381.

Tasks updated

Task	Old → New	Changes
42crunch-api-security-audit	0.3 → 0.4	apiVersion v1, minVersion 0.50.0
anchore-cli	0.1 → 0.2	apiVersion v1, minVersion 0.50.0
nexus-lifecycle-scan	0.1 → 0.2	apiVersion v1, minVersion 0.50.0
rhacs-deployment-check	3.71 → 3.72	apiVersion v1, minVersion 0.50.0
rhacs-image-check	3.71 → 3.72	apiVersion v1, minVersion 0.50.0
rhacs-image-scan	3.71 → 3.72	apiVersion v1, minVersion 0.50.0
stackrox-image-check	0.1 → 0.2	apiVersion v1, minVersion 0.50.0
stackrox-image-scan	0.1 → 0.2	apiVersion v1, minVersion 0.50.0
syft	0.1 → 0.2	apiVersion v1, minVersion 0.50.0
trivy-scanner	0.2 → 0.3	apiVersion v1, minVersion 0.50.0
valint	0.1 → 0.2	apiVersion v1, minVersion 0.50.0

Each new version was created using copy-then-modify per CONTRIBUTING.md.

Image pinning

All images in this batch are either already pinned by digest or referenced through task params:

• 42crunch-api-security-audit: docker.io/42crunch/docker-api-security-audit:v4.2 — pinned by sha256
• stackrox-image-check / stackrox-image-scan: docker.io/centos — pinned by sha256
• anchore-cli, rhacs-*, syft, trivy-scanner: image provided via task params
• valint: image tag provided via $(params.version), base image hardcoded
• nexus-lifecycle-scan: docker.io/sonatype/nexus-iq-cli:1.136.0-01 — build-specific tag, kept as-is

No additional pinning was required.

Additional changes

• Samples: PipelineRun and Pipeline manifests bumped from v1beta1 to v1 across 42crunch, rhacs-, stackrox-, nexus-lifecycle-scan, and valint
• Tests: syft, trivy-scanner, and valint test manifests bumped to v1
• valint README: 17 inline apiVersion references updated from v1beta1 to v1

Validation

• Zero remaining v1beta1 references across all 11 new version directories (53 files)
• File count matches between old and new versions for every task
• Semantic diff confirms only apiVersion, app.kubernetes.io/version, and pipelines.minVersion changed in task YAMLs
• No changes to original versions

Note on pre-existing conditions

anchore-cli, stackrox-image-check, and stackrox-image-scan interpolate $(params.*) directly
in script: blocks. These patterns are inherited from previous versions and not introduced by this PR.
Script injection hardening will be addressed in a separate batch as part of #1381.

Ref: #1381

/kind cleanup

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

• Follows the authoring recommendations
• Includes docs (if user facing)
• Includes tests (for new tasks or changed functionality)
  • See the end-to-end testing documentation for guidance and CI details.
• Meets the Tekton contributor standards (including functionality, content, code)
• Commit messages follow commit message best practices
• Has a kind label. You can add one by adding a comment on this PR that
  contains /kind <type>. Valid types are bug, cleanup, design, documentation,
  feature, flake, misc, question, tep
• Complies with Catalog Organization TEP, see example. Note An issue has been filed to automate this validation
  • File path follows <kind>/<name>/<version>/name.yaml
  • Has README.md at <kind>/<name>/<version>/README.md

[tekton-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign vinamra28 after the PR has been reviewed.
You can assign the PR to them by writing /assign @vinamra28 in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[gferreir]

/assign vdemeester