Tekton Catalog health report (API versions, security, images, CVEs) — generated by catalog-health.py

catalog-health-analyzer.py

#!/usr/bin/env -S uv run --script
# /// script
# requires-python = ">=3.11"
# dependencies = ["pyyaml"]
# ///
"""Tekton Catalog health analyzer.

Walks the primary manifests in task/, pipeline/, and stepaction/ and produces
a structured health report across several dimensions:

  - API version currency      (Task/Pipeline -> v1, StepAction -> v1beta1)
  - Image pinning & registry  (digest vs mutable tag vs :latest; param-driven)
  - Security posture          (securityContext, privileged, caps, $(params) in script)
  - Metadata completeness     (minVersion, categories, tags, displayName, platforms, description)
  - Modernization             (PipelineResources, taskRef.bundle, ClusterTask, deprecated)
  - Tests & structure         (tests/run.yaml, OWNERS)

Phase 2 (optional, --images / --cve) resolves default image digests via
skopeo/crane and scans them with trivy (bootstrapped via `nix run nixpkgs#trivy`
when not already on PATH).

Usage:
  catalog-health.py [--root DIR] [--images] [--cve] [--severity HIGH,CRITICAL]
                    [--md OUT.md] [--json OUT.json] [--limit-images N]
"""
from __future__ import annotations

import argparse
import json
import os
import re
import shutil
import subprocess
import sys
from dataclasses import dataclass, field, asdict
from pathlib import Path

import yaml

KIND_TARGET = {
    "Task": "tekton.dev/v1",
    "Pipeline": "tekton.dev/v1",
    "StepAction": "tekton.dev/v1beta1",
    "ClusterTask": "tekton.dev/v1",
}

DIGEST_RE = re.compile(r"@sha256:[0-9a-f]{64}")
PARAM_IN_SCRIPT_RE = re.compile(r"\$\(params\.[A-Za-z0-9_.-]+\)")
IMAGE_RE = re.compile(r"^[ \t]*image:\s*([\"']?)(\S+?)\1\s*$", re.M)


@dataclass
class ResourceReport:
    path: str
    kind: str
    name: str
    version: str
    api_version: str
    api_current: bool
    # metadata
    has_min_version: bool = False
    has_categories: bool = False
    has_tags: bool = False
    has_display_name: bool = False
    has_platforms: bool = False
    has_description: bool = False
    deprecated: bool = False
    # modernization
    uses_pipelineresources: bool = False
    uses_taskref_bundle: bool = False
    # tests/structure
    has_tests: bool = False
    has_owners: bool = False
    # security / images
    images: list[str] = field(default_factory=list)
    images_pinned: list[str] = field(default_factory=list)
    images_mutable: list[str] = field(default_factory=list)
    images_latest: list[str] = field(default_factory=list)
    images_param: list[str] = field(default_factory=list)
    script_param_injection: list[str] = field(default_factory=list)
    has_security_context: bool = False
    privileged: bool = False
    runs_as_root_explicit: bool = False
    issues: list[str] = field(default_factory=list)


def load_docs(path: Path):
    try:
        return [d for d in yaml.safe_load_all(path.read_text()) if isinstance(d, dict)]
    except Exception as e:  # noqa: BLE001
        return [{"__parse_error__": str(e)}]


def primary_manifests(root: Path, kinddir: str):
    base = root / kinddir
    if not base.is_dir():
        return
    for f in sorted(base.glob("*/*/*.yaml")):
        name = f.stem
        parent = f.parent.parent.name
        if name == parent:
            yield f


def analyze(path: Path, root: Path) -> ResourceReport:
    rel = str(path.relative_to(root))
    docs = load_docs(path)
    primary = None
    for d in docs:
        if "__parse_error__" in d:
            r = ResourceReport(rel, "?", path.stem, path.parent.name, "?", False)
            r.issues.append(f"YAML parse error: {d['__parse_error__']}")
            return r
        if d.get("kind") in KIND_TARGET:
            primary = d
            break
    if primary is None:
        primary = docs[0] if docs else {}

    kind = primary.get("kind", "?")
    api = primary.get("apiVersion", "?")
    meta = primary.get("metadata", {}) or {}
    labels = meta.get("labels", {}) or {}
    annos = meta.get("annotations", {}) or {}
    spec = primary.get("spec", {}) or {}

    version = labels.get("app.kubernetes.io/version") or path.parent.name
    target = KIND_TARGET.get(kind)
    r = ResourceReport(
        path=rel, kind=kind, name=meta.get("name", path.stem),
        version=str(version), api_version=api,
        api_current=(api == target) if target else False,
    )

    # metadata completeness
    r.has_min_version = "tekton.dev/pipelines.minVersion" in annos
    r.has_categories = "tekton.dev/categories" in annos
    r.has_tags = "tekton.dev/tags" in annos
    r.has_display_name = "tekton.dev/displayName" in annos
    r.has_platforms = "tekton.dev/platforms" in annos
    r.has_description = bool(str(spec.get("description", "")).strip())
    r.deprecated = str(annos.get("tekton.dev/deprecated", "")).lower() == "true"

    # modernization
    r.uses_pipelineresources = "resources" in spec
    raw = path.read_text()
    r.uses_taskref_bundle = bool(re.search(r"^\s*bundle:\s", raw, re.M))

    # tests / structure
    r.has_tests = (path.parent / "tests" / "run.yaml").exists()
    r.has_owners = (path.parent.parent / "OWNERS").exists()

    # images
    for m in IMAGE_RE.finditer(raw):
        img = m.group(2)
        r.images.append(img)
        if "$(params" in img or "$(steps" in img or "$(results" in img:
            r.images_param.append(img)
        elif DIGEST_RE.search(img):
            r.images_pinned.append(img)
        elif img.endswith(":latest") or ":" not in img.rsplit("/", 1)[-1]:
            r.images_latest.append(img)
        else:
            r.images_mutable.append(img)

    # security: scan steps
    steps = []
    if isinstance(spec.get("steps"), list):
        steps += spec["steps"]
    # StepAction is itself a single step-like spec
    if kind == "StepAction":
        steps += [spec]
    for st in steps:
        if not isinstance(st, dict):
            continue
        sc = st.get("securityContext")
        if sc:
            r.has_security_context = True
            if sc.get("privileged") is True:
                r.privileged = True
            if sc.get("runAsNonRoot") is False or sc.get("runAsUser") == 0:
                r.runs_as_root_explicit = True
        script = st.get("script")
        if isinstance(script, str):
            for pm in PARAM_IN_SCRIPT_RE.findall(script):
                r.script_param_injection.append(pm)

    _derive_issues(r, target)
    return r


def _derive_issues(r: ResourceReport, target: str | None):
    if target and not r.api_current:
        r.issues.append(f"apiVersion {r.api_version} -> should be {target}")
    if r.uses_pipelineresources:
        r.issues.append("uses PipelineResources (spec.resources) — not representable in v1")
    if r.uses_taskref_bundle:
        r.issues.append("uses deprecated taskRef.bundle (use bundles resolver)")
    if r.script_param_injection:
        uniq = sorted(set(r.script_param_injection))
        r.issues.append(f"$(params) used inside script (injection risk): {', '.join(uniq[:5])}")
    if r.privileged:
        r.issues.append("privileged securityContext")
    if r.images_latest:
        r.issues.append(f"unpinned :latest/no-tag image(s): {len(r.images_latest)}")
    if r.images_mutable:
        r.issues.append(f"mutable-tag image(s) (not digest-pinned): {len(r.images_mutable)}")
    if not r.has_min_version:
        r.issues.append("missing tekton.dev/pipelines.minVersion")
    if not r.has_description:
        r.issues.append("missing spec.description")
    if not r.has_categories:
        r.issues.append("missing tekton.dev/categories")
    if r.kind in ("Task", "StepAction") and not r.has_tests:
        r.issues.append("no tests/run.yaml")


# ---------------- Phase 2: image freshness & CVE ----------------

def have(cmd: str) -> bool:
    return shutil.which(cmd) is not None


def trivy_cmd() -> list[str] | None:
    if have("trivy"):
        return ["trivy"]
    if have("nix"):
        return ["nix", "run", "nixpkgs#trivy", "--"]
    return None


def resolve_digest(image: str) -> str | None:
    if "$(params" in image or "$(" in image:
        return None
    try:
        if have("crane"):
            out = subprocess.run(["crane", "digest", image], capture_output=True,
                                 text=True, timeout=60)
            if out.returncode == 0 and out.stdout.strip():
                return f"{image.split('@')[0].split(':')[0]}@{out.stdout.strip()}"
        if have("skopeo"):
            ref = image if image.startswith("docker://") else f"docker://{image}"
            out = subprocess.run(["skopeo", "inspect", "--format", "{{.Digest}}", ref],
                                 capture_output=True, text=True, timeout=60)
            if out.returncode == 0 and out.stdout.strip():
                return f"{image.split('@')[0].split(':')[0]}@{out.stdout.strip()}"
    except Exception:  # noqa: BLE001
        return None
    return None


def scan_image(image: str, severity: str, tcmd: list[str]) -> dict:
    res = {"image": image, "resolved": None, "scanned": False,
           "critical": 0, "high": 0, "medium": 0, "error": None}
    digest = resolve_digest(image)
    res["resolved"] = digest
    target = digest or image
    if "$(" in target:
        res["error"] = "param-driven image (not scannable)"
        return res
    try:
        cmd = tcmd + ["image", "--quiet", "--format", "json",
                      "--severity", severity, "--scanners", "vuln", target]
        out = subprocess.run(cmd, capture_output=True, text=True, timeout=600)
        if out.returncode != 0:
            res["error"] = (out.stderr or "trivy failed").strip().splitlines()[-1][:200]
            return res
        data = json.loads(out.stdout or "{}")
        for r in (data.get("Results") or []):
            for v in (r.get("Vulnerabilities") or []):
                sev = (v.get("Severity") or "").lower()
                if sev in res:
                    res[sev] += 1
        res["scanned"] = True
    except Exception as e:  # noqa: BLE001
        res["error"] = str(e)[:200]
    return res


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("--root", default=".")
    ap.add_argument("--images", action="store_true", help="resolve default image digests")
    ap.add_argument("--cve", action="store_true", help="trivy CVE scan (implies --images)")
    ap.add_argument("--severity", default="HIGH,CRITICAL")
    ap.add_argument("--limit-images", type=int, default=0)
    ap.add_argument("--load-scans", help="reuse image_scans from a prior JSON report")
    ap.add_argument("--md", default="catalog-health.md")
    ap.add_argument("--json", default="catalog-health.json")
    args = ap.parse_args()

    root = Path(args.root).resolve()
    reports: list[ResourceReport] = []
    for kinddir in ("task", "pipeline", "stepaction"):
        for f in primary_manifests(root, kinddir):
            reports.append(analyze(f, root))

    image_scans = {}
    if args.load_scans and Path(args.load_scans).exists():
        image_scans = json.load(open(args.load_scans)).get("image_scans", {})
    elif args.images or args.cve:
        all_imgs = sorted({i for r in reports for i in (r.images_mutable + r.images_latest + r.images_pinned)
                           if "$(" not in i})
        if args.limit_images:
            all_imgs = all_imgs[: args.limit_images]
        tcmd = trivy_cmd() if args.cve else None
        if args.cve and not tcmd:
            print("WARNING: trivy/nix not available; skipping CVE scan", file=sys.stderr)
        for n, img in enumerate(all_imgs, 1):
            print(f"[{n}/{len(all_imgs)}] {'scan' if args.cve and tcmd else 'resolve'} {img}", file=sys.stderr)
            if args.cve and tcmd:
                image_scans[img] = scan_image(img, args.severity, tcmd)
            else:
                image_scans[img] = {"image": img, "resolved": resolve_digest(img)}

    out = {
        "summary": _summary(reports, image_scans),
        "resources": [asdict(r) for r in reports],
        "image_scans": image_scans,
    }
    Path(args.json).write_text(json.dumps(out, indent=2))
    Path(args.md).write_text(render_md(reports, image_scans))
    print(f"\nWrote {args.md} and {args.json}", file=sys.stderr)
    s = out["summary"]
    print(json.dumps(s, indent=2))


def _summary(reports, image_scans):
    def count(pred):
        return sum(1 for r in reports if pred(r))
    by_kind = {}
    for r in reports:
        by_kind.setdefault(r.kind, {"total": 0, "current": 0})
        by_kind[r.kind]["total"] += 1
        by_kind[r.kind]["current"] += int(r.api_current)
    cve_total = {"critical": 0, "high": 0}
    for s in image_scans.values():
        cve_total["critical"] += s.get("critical", 0)
        cve_total["high"] += s.get("high", 0)
    return {
        "resources": len(reports),
        "by_kind": by_kind,
        "api_outdated": count(lambda r: not r.api_current and r.kind in KIND_TARGET),
        "pipelineresources": count(lambda r: r.uses_pipelineresources),
        "taskref_bundle": count(lambda r: r.uses_taskref_bundle),
        "script_injection": count(lambda r: bool(r.script_param_injection)),
        "privileged": count(lambda r: r.privileged),
        "unpinned_latest": count(lambda r: bool(r.images_latest)),
        "mutable_images": count(lambda r: bool(r.images_mutable)),
        "missing_min_version": count(lambda r: not r.has_min_version),
        "missing_description": count(lambda r: not r.has_description),
        "missing_tests": count(lambda r: r.kind in ("Task", "StepAction") and not r.has_tests),
        "deprecated": count(lambda r: r.deprecated),
        "images_considered": len(image_scans),
        "cve_high_critical_total": cve_total,
    }


def render_md(reports, image_scans) -> str:
    s = _summary(reports, image_scans)
    L = ["# Tekton Catalog — Health Report", ""]
    L.append(f"Analyzed **{s['resources']}** primary manifests "
             f"(task/pipeline/stepaction).")
    L.append("")
    L.append("## Summary")
    L.append("")
    L.append("| Metric | Count |")
    L.append("|--------|------:|")
    rows = [
        ("API version outdated", s["api_outdated"]),
        ("Uses PipelineResources", s["pipelineresources"]),
        ("Uses taskRef.bundle", s["taskref_bundle"]),
        ("$(params) in script (injection)", s["script_injection"]),
        ("Privileged securityContext", s["privileged"]),
        (":latest / untagged images", s["unpinned_latest"]),
        ("Mutable-tag images (not digest)", s["mutable_images"]),
        ("Missing minVersion", s["missing_min_version"]),
        ("Missing spec.description", s["missing_description"]),
        ("Missing tests/run.yaml", s["missing_tests"]),
        ("Deprecated", s["deprecated"]),
    ]
    for k, v in rows:
        L.append(f"| {k} | {v} |")
    L.append("")
    L.append("### API currency by kind")
    L.append("")
    L.append("| Kind | Current / Total |")
    L.append("|------|----------------:|")
    for k, d in sorted(s["by_kind"].items()):
        L.append(f"| {k} | {d['current']} / {d['total']} |")
    L.append("")
    if image_scans and any("critical" in v for v in image_scans.values()):
        cv = s["cve_high_critical_total"]
        L.append(f"### CVEs (HIGH/CRITICAL): {cv['critical']} critical, {cv['high']} high "
                 f"across {s['images_considered']} images")
        L.append("")
        L.append("| Image | Crit | High | Note |")
        L.append("|-------|-----:|-----:|------|")
        for img, v in sorted(image_scans.items(), key=lambda kv: -(kv[1].get('critical',0)*100+kv[1].get('high',0))):
            if not (v.get("critical") or v.get("high") or v.get("error")):
                continue
            L.append(f"| `{img}` | {v.get('critical',0)} | {v.get('high',0)} | {v.get('error') or ''} |")
        L.append("")

    # Per-resource issues, grouped by kind
    L.append("## Findings per resource")
    for kind in ("Task", "Pipeline", "StepAction"):
        krs = [r for r in reports if r.kind == kind and r.issues]
        if not krs:
            continue
        L.append("")
        L.append(f"### {kind} ({len(krs)} with findings)")
        L.append("")
        for r in sorted(krs, key=lambda r: r.path):
            L.append(f"- **`{r.path}`** — {'; '.join(r.issues)}")
    L.append("")
    return "\n".join(L)


if __name__ == "__main__":
    main()

catalog-health.json

{
  "summary": {
    "resources": 308,
    "by_kind": {
      "Task": {
        "total": 300,
        "current": 37
      },
      "Pipeline": {
        "total": 3,
        "current": 0
      },
      "StepAction": {
        "total": 5,
        "current": 2
      }
    },
    "api_outdated": 269,
    "pipelineresources": 11,
    "taskref_bundle": 0,
    "script_injection": 172,
    "privileged": 27,
    "unpinned_latest": 2,
    "mutable_images": 58,
    "missing_min_version": 3,
    "missing_description": 11,
    "missing_tests": 113,
    "deprecated": 150,
    "images_considered": 50,
    "cve_high_critical_total": {
      "critical": 956,
      "high": 11553
    }
  },
  "resources": [
    {
      "path": "task/42crunch-api-security-audit/0.1/42crunch-api-security-audit.yaml",
      "kind": "Task",
      "name": "42crunch-api-security-audit",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/42crunch/docker-api-security-audit:v3@sha256:1a62cdf9975531e2bd0b99d985b5e4e0b89fe1fe5c02f60ecb2e4c708807aa37"
      ],
      "images_pinned": [
        "docker.io/42crunch/docker-api-security-audit:v3@sha256:1a62cdf9975531e2bd0b99d985b5e4e0b89fe1fe5c02f60ecb2e4c708807aa37"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/42crunch-api-security-audit/0.2/42crunch-api-security-audit.yaml",
      "kind": "Task",
      "name": "42crunch-api-security-audit",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/42crunch/docker-api-security-audit:v3.4@sha256:a55fca6e063ad74d9f8c1d65f602aab431c80901a801af3cb045e3a4f961eba5"
      ],
      "images_pinned": [
        "docker.io/42crunch/docker-api-security-audit:v3.4@sha256:a55fca6e063ad74d9f8c1d65f602aab431c80901a801af3cb045e3a4f961eba5"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/42crunch-api-security-audit/0.3/42crunch-api-security-audit.yaml",
      "kind": "Task",
      "name": "42crunch-api-security-audit",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/42crunch/docker-api-security-audit:v4.2@sha256:350df27b2a1b1aac8e3772d8fb13b254569d49c960f31ab58aa3a1e2fbcec3fe"
      ],
      "images_pinned": [
        "docker.io/42crunch/docker-api-security-audit:v4.2@sha256:350df27b2a1b1aac8e3772d8fb13b254569d49c960f31ab58aa3a1e2fbcec3fe"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/ai-code-review/0.1/ai-code-review.yaml",
      "kind": "Task",
      "name": "ai-code-review",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/library/python:3.12-slim",
        "docker.io/library/python:3.12-slim"
      ],
      "images_pinned": [],
      "images_mutable": [
        "docker.io/library/python:3.12-slim",
        "docker.io/library/python:3.12-slim"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 2",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/anchore-cli/0.1/anchore-cli.yaml",
      "kind": "Task",
      "name": "anchore-cli",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.ANCHORE_CLI_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.ANCHORE_CLI_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.ANCHORE_CLI_URL)",
        "$(params.IMAGE_NAME)",
        "$(params.IMAGE_NAME)",
        "$(params.IMAGE_NAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.ANCHORE_CLI_URL), $(params.IMAGE_NAME)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/ansible-builder/0.1/ansible-builder.yaml",
      "kind": "Task",
      "name": "ansible-builder",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.FILENAME)",
        "$(params.BUILD_CONTEXT)",
        "$(params.OUTPUT_FILENAME)",
        "$(params.VERBOSITY)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_CONTEXT), $(params.FILENAME), $(params.OUTPUT_FILENAME), $(params.VERBOSITY)"
      ]
    },
    {
      "path": "task/ansible-runner/0.1/ansible-runner.yaml",
      "kind": "Task",
      "name": "ansible-runner",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/ansible-runner/0.2/ansible-runner.yaml",
      "kind": "Task",
      "name": "ansible-runner",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)",
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)",
        "$(params.image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/ansible-tower-cli/0.1/ansible-tower-cli.yaml",
      "kind": "Task",
      "name": "ansible-tower-cli",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/argocd-task-connect-repo/0.1/argocd-task-connect-repo.yaml",
      "kind": "Task",
      "name": "argocd-task-connect-repo",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "quay.io/argoproj/argocd:$(params.argocd-version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "quay.io/argoproj/argocd:$(params.argocd-version)"
      ],
      "script_param_injection": [
        "$(params.repository-type)",
        "$(params.repository-url)",
        "$(params.flags)",
        "$(params.repository-url)",
        "$(params.repository-name)",
        "$(params.flags)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags), $(params.repository-name), $(params.repository-type), $(params.repository-url)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/argocd-task-sync-and-wait/0.1/argocd-task-sync-and-wait.yaml",
      "kind": "Task",
      "name": "argocd-task-sync-and-wait",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/argoproj/argocd:$(params.argocd-version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/argoproj/argocd:$(params.argocd-version)"
      ],
      "script_param_injection": [
        "$(params.application-name)",
        "$(params.revision)",
        "$(params.flags)",
        "$(params.application-name)",
        "$(params.flags)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.application-name), $(params.flags), $(params.revision)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/argocd-task-sync-and-wait/0.2/argocd-task-sync-and-wait.yaml",
      "kind": "Task",
      "name": "argocd-task-sync-and-wait",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "quay.io/argoproj/argocd:$(params.argocd-version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "quay.io/argoproj/argocd:$(params.argocd-version)"
      ],
      "script_param_injection": [
        "$(params.application-name)",
        "$(params.revision)",
        "$(params.flags)",
        "$(params.application-name)",
        "$(params.flags)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.application-name), $(params.flags), $(params.revision)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/asciidoctor/0.1/asciidoctor.yaml",
      "kind": "Task",
      "name": "asciidoctor",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.ASCIIDOC_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.ASCIIDOC_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/aws-cli/0.1/aws-cli.yaml",
      "kind": "Task",
      "name": "aws-cli",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/aws-cli/0.2/aws-cli.yaml",
      "kind": "Task",
      "name": "aws-cli",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/aws-ecr-login/0.1/aws-ecr-login.yaml",
      "kind": "Task",
      "name": "aws-ecr-login",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.region)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.region)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/az/0.1/az.yaml",
      "kind": "Task",
      "name": "az",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.az-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.az-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/bentoml/0.1/bentoml.yaml",
      "kind": "Task",
      "name": "bentoml",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/black/0.1/black.yaml",
      "kind": "Task",
      "name": "black",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/black/0.2/black.yaml",
      "kind": "Task",
      "name": "black",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.requirements_file)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.requirements_file)"
      ]
    },
    {
      "path": "task/blue-green-deploy/0.1/blue-green-deploy.yaml",
      "kind": "Task",
      "name": "blue-green-deploy",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "quay.io/openshift/origin-cli:4.6"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/openshift/origin-cli:4.6"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SERVICE_NAME)",
        "$(params.NEW_VERSION)",
        "$(params.SERVICE_NAME)",
        "$(params.NEW_VERSION)",
        "$(params.MANIFEST)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.MANIFEST), $(params.NEW_VERSION), $(params.SERVICE_NAME)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/blue-green-deploy/0.2/blue-green-deploy.yaml",
      "kind": "Task",
      "name": "blue-green-deploy",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.IMAGE)"
      ],
      "script_param_injection": [
        "$(params.NAMESPACE)",
        "$(params.NAMESPACE)",
        "$(params.NAMESPACE)",
        "$(params.NAMESPACE)",
        "$(params.SERVICE_NAME)",
        "$(params.NEW_VERSION)",
        "$(params.SERVICE_NAME)",
        "$(params.NEW_VERSION)",
        "$(params.NAMESPACE)",
        "$(params.MANIFEST)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.MANIFEST), $(params.NAMESPACE), $(params.NEW_VERSION), $(params.SERVICE_NAME)"
      ]
    },
    {
      "path": "task/boskos-acquire/0.1/boskos-acquire.yaml",
      "kind": "Task",
      "name": "boskos-acquire",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105",
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09",
        "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105"
      ],
      "images_pinned": [
        "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105",
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09",
        "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.server-url)",
        "$(params.owner-name)",
        "$(params.type)",
        "$(params.server-url)",
        "$(params.owner-name)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.owner-name), $(params.server-url), $(params.type)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/boskos-release/0.1/boskos-release.yaml",
      "kind": "Task",
      "name": "boskos-release",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105",
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09"
      ],
      "images_pinned": [
        "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105",
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/buildah/0.1/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.STORAGE_DRIVER)",
        "$(params.BUILD_EXTRA_ARGS)",
        "$(params.FORMAT)",
        "$(params.TLSVERIFY)",
        "$(params.DOCKERFILE)",
        "$(params.IMAGE)",
        "$(params.CONTEXT)",
        "$(params.STORAGE_DRIVER)",
        "$(params.PUSH_EXTRA_ARGS)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.2/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.STORAGE_DRIVER)",
        "$(params.BUILD_EXTRA_ARGS)",
        "$(params.FORMAT)",
        "$(params.TLSVERIFY)",
        "$(params.DOCKERFILE)",
        "$(params.IMAGE)",
        "$(params.CONTEXT)",
        "$(params.STORAGE_DRIVER)",
        "$(params.PUSH_EXTRA_ARGS)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.3/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.STORAGE_DRIVER)",
        "$(params.BUILD_EXTRA_ARGS)",
        "$(params.FORMAT)",
        "$(params.TLSVERIFY)",
        "$(params.DOCKERFILE)",
        "$(params.IMAGE)",
        "$(params.CONTEXT)",
        "$(params.SKIP_PUSH)",
        "$(params.STORAGE_DRIVER)",
        "$(params.PUSH_EXTRA_ARGS)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.4/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.STORAGE_DRIVER)",
        "$(params.BUILD_EXTRA_ARGS)",
        "$(params.FORMAT)",
        "$(params.TLSVERIFY)",
        "$(params.DOCKERFILE)",
        "$(params.IMAGE)",
        "$(params.CONTEXT)",
        "$(params.SKIP_PUSH)",
        "$(params.STORAGE_DRIVER)",
        "$(params.PUSH_EXTRA_ARGS)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.5/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.5",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.STORAGE_DRIVER)",
        "$(params.BUILD_EXTRA_ARGS)",
        "$(params.FORMAT)",
        "$(params.TLSVERIFY)",
        "$(params.DOCKERFILE)",
        "$(params.IMAGE)",
        "$(params.CONTEXT)",
        "$(params.SKIP_PUSH)",
        "$(params.STORAGE_DRIVER)",
        "$(params.PUSH_EXTRA_ARGS)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.6/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.6",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.STORAGE_DRIVER)",
        "$(params.BUILD_EXTRA_ARGS)",
        "$(params.FORMAT)",
        "$(params.TLSVERIFY)",
        "$(params.DOCKERFILE)",
        "$(params.IMAGE)",
        "$(params.CONTEXT)",
        "$(params.SKIP_PUSH)",
        "$(params.STORAGE_DRIVER)",
        "$(params.PUSH_EXTRA_ARGS)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.7/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.7",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.STORAGE_DRIVER)",
        "$(params.BUILD_EXTRA_ARGS)",
        "$(params.FORMAT)",
        "$(params.TLSVERIFY)",
        "$(params.DOCKERFILE)",
        "$(params.IMAGE)",
        "$(params.CONTEXT)",
        "$(params.SKIP_PUSH)",
        "$(params.STORAGE_DRIVER)",
        "$(params.PUSH_EXTRA_ARGS)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.8/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.8",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah/0.9/buildah.yaml",
      "kind": "Task",
      "name": "buildah",
      "version": "0.9",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildah-manifest-create/0.1/buildah-manifest-create.yaml",
      "kind": "Task",
      "name": "buildah-manifest-create",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "privileged securityContext",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/buildah-manifest-push/0.1/buildah-manifest-push.yaml",
      "kind": "Task",
      "name": "buildah-manifest-push",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "privileged securityContext",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/buildkit/0.1/buildkit.yaml",
      "kind": "Task",
      "name": "buildkit",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.BUILDKIT_CLIENT_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDKIT_CLIENT_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/buildkit-daemonless/0.1/buildkit-daemonless.yaml",
      "kind": "Task",
      "name": "buildkit-daemonless",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.BUILDKIT_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDKIT_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "privileged securityContext",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/buildpacks/0.1/buildpacks.yaml",
      "kind": "Task",
      "name": "buildpacks",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildpacks/0.2/buildpacks.yaml",
      "kind": "Task",
      "name": "buildpacks",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/alpine@sha256:203ee936961c0f491f72ce9d3c3c67d9440cdb1d61b9783cf340baa09308ffc1",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [
        "docker.io/alpine@sha256:203ee936961c0f491f72ce9d3c3c67d9440cdb1d61b9783cf340baa09308ffc1"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1"
      ]
    },
    {
      "path": "task/buildpacks/0.3/buildpacks.yaml",
      "kind": "Task",
      "name": "buildpacks",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "$(params.BUILDER_IMAGE)",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_pinned": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.USER_ID)",
        "$(params.GROUP_ID)",
        "$(params.USER_ID)",
        "$(params.GROUP_ID)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GROUP_ID), $(params.USER_ID)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildpacks/0.4/buildpacks.yaml",
      "kind": "Task",
      "name": "buildpacks",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "$(params.BUILDER_IMAGE)",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_pinned": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.USER_ID)",
        "$(params.GROUP_ID)",
        "$(params.USER_ID)",
        "$(params.GROUP_ID)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GROUP_ID), $(params.USER_ID)"
      ]
    },
    {
      "path": "task/buildpacks/0.5/buildpacks.yaml",
      "kind": "Task",
      "name": "buildpacks",
      "version": "0.5",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "$(params.BUILDER_IMAGE)",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_pinned": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.USER_ID)",
        "$(params.GROUP_ID)",
        "$(params.USER_ID)",
        "$(params.GROUP_ID)",
        "$(params.APP_IMAGE)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.APP_IMAGE), $(params.GROUP_ID), $(params.USER_ID)"
      ]
    },
    {
      "path": "task/buildpacks/0.6/buildpacks.yaml",
      "kind": "Task",
      "name": "buildpacks",
      "version": "0.6",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "$(params.BUILDER_IMAGE)",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_pinned": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.USER_ID)",
        "$(params.GROUP_ID)",
        "$(params.USER_ID)",
        "$(params.GROUP_ID)",
        "$(params.APP_IMAGE)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.APP_IMAGE), $(params.GROUP_ID), $(params.USER_ID)"
      ]
    },
    {
      "path": "task/buildpacks-phases/0.1/buildpacks-phases.yaml",
      "kind": "Task",
      "name": "buildpacks-phases",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildpacks-phases/0.2/buildpacks-phases.yaml",
      "kind": "Task",
      "name": "buildpacks-phases",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.LIFECYCLE_IMAGE)",
        "$(params.LIFECYCLE_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.LIFECYCLE_IMAGE)",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_pinned": [
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
        "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.LIFECYCLE_IMAGE)",
        "$(params.LIFECYCLE_IMAGE)",
        "$(params.BUILDER_IMAGE)",
        "$(params.LIFECYCLE_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.USER_ID)",
        "$(params.GROUP_ID)",
        "$(params.USER_ID)",
        "$(params.GROUP_ID)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GROUP_ID), $(params.USER_ID)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/buildpacks-phases/0.3/buildpacks-phases.yaml",
      "kind": "Task",
      "name": "buildpacks-phases",
      "version": "0.3",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.INSPECT_TOOLS_IMAGE)",
        "registry.access.redhat.com/ubi8/ubi-minimal@sha256:b2a1bec3dfbc7a14a1d84d98934dfe8fdde6eb822a211286601cf109cbccb075",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "registry.access.redhat.com/ubi8/python-311@sha256:43605cb2491ef2297a7acf4b4bf0b7f54f0c91b96daf12ae41c49cc7f192b153"
      ],
      "images_pinned": [
        "registry.access.redhat.com/ubi8/ubi-minimal@sha256:b2a1bec3dfbc7a14a1d84d98934dfe8fdde6eb822a211286601cf109cbccb075",
        "registry.access.redhat.com/ubi8/python-311@sha256:43605cb2491ef2297a7acf4b4bf0b7f54f0c91b96daf12ae41c49cc7f192b153"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.INSPECT_TOOLS_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)",
        "$(params.CNB_BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CNB_PLATFORM_DIR)",
        "$(params.CNB_PLATFORM_DIR)",
        "$(params.SOURCE_SUBPATH)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "$(params) used inside script (injection risk): $(params.CNB_PLATFORM_DIR), $(params.SOURCE_SUBPATH)"
      ]
    },
    {
      "path": "task/check-make/0.1/check-make.yaml",
      "kind": "Task",
      "name": "check-make",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/cloudevent/0.1/cloudevent.yaml",
      "kind": "Task",
      "name": "cloudevent",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/iancoffey/sendevent-89c3de01c503ceb66b676a3e41c265ed@sha256:fc39998cba7ad8e54323b948b56b11b0b235996069349fb74776865fedf182a5"
      ],
      "images_pinned": [
        "docker.io/iancoffey/sendevent-89c3de01c503ceb66b676a3e41c265ed@sha256:fc39998cba7ad8e54323b948b56b11b0b235996069349fb74776865fedf182a5"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/codecov/0.1/codecov.yaml",
      "kind": "Task",
      "name": "codecov",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454"
      ],
      "images_pinned": [
        "ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/codecov/0.2/codecov.yaml",
      "kind": "Task",
      "name": "codecov",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454"
      ],
      "images_pinned": [
        "ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": []
    },
    {
      "path": "task/conftest/0.1/conftest.yaml",
      "kind": "Task",
      "name": "conftest",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/conftest/0.2/conftest.yaml",
      "kind": "Task",
      "name": "conftest",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/create-github-release/0.1/create-github-release.yaml",
      "kind": "Task",
      "name": "create-github-release",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.TAG)",
        "$(params.REVISION)",
        "$(params.RELEASE_FILE_NAME)",
        "$(params.TAG)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.RELEASE_FILE_NAME), $(params.REVISION), $(params.TAG)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/create-gitlab-release/0.1/create-gitlab-release.yaml",
      "kind": "Task",
      "name": "create-gitlab-release",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.UPLOAD_ASSET_NAME)",
        "$(params.UPLOAD_ASSET_URL)",
        "$(params.UPLOAD_ASSET_NAME)",
        "$(params.UPLOAD_ASSET_URL)",
        "$(params.NAME)",
        "$(params.TAG_NAME)",
        "$(params.DESCRIPTION)",
        "$(params.RELEASE_REF)",
        "$(params.TAG_NAME)",
        "$(params.PROJECT_ID)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.DESCRIPTION), $(params.NAME), $(params.PROJECT_ID), $(params.RELEASE_REF), $(params.TAG_NAME)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/curl/0.1/curl.yaml",
      "kind": "Task",
      "name": "curl",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.curl-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.curl-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/datree/0.1/datree.yaml",
      "kind": "Task",
      "name": "datree",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.datreeImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.datreeImage)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "privileged securityContext",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/docker-build/0.1/docker-build.yaml",
      "kind": "Task",
      "name": "docker-build",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.builder_image)",
        "$(params.builder_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.builder_image)",
        "$(params.builder_image)"
      ],
      "script_param_injection": [
        "$(params.build_extra_args)",
        "$(params.dockerfile)",
        "$(params.image)",
        "$(params.context)",
        "$(params.push_extra_args)",
        "$(params.image)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.build_extra_args), $(params.context), $(params.dockerfile), $(params.image), $(params.push_extra_args)"
      ]
    },
    {
      "path": "task/dockerslim-build/0.1/dockerslim-build.yaml",
      "kind": "Task",
      "name": "dockerslim-build",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.builder_image)",
        "$(params.push_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.builder_image)",
        "$(params.push_image)"
      ],
      "script_param_injection": [
        "$(params.image)",
        "$(params.push_extra_args)",
        "$(params.image)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.image), $(params.push_extra_args)"
      ]
    },
    {
      "path": "task/eks-cluster-create/0.1/eks-cluster-create.yaml",
      "kind": "Task",
      "name": "eks-cluster-create",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/weaveworks/eksctl:0.35.0@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327"
      ],
      "images_pinned": [
        "docker.io/weaveworks/eksctl:0.35.0@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.cluster-name)",
        "$(params.version)",
        "$(params.region)",
        "$(params.zones)",
        "$(params.nodegroup-name)",
        "$(params.node-type)",
        "$(params.desired-nodes)",
        "$(params.min-nodes)",
        "$(params.max-nodes)",
        "$(params.cluster-name)",
        "$(params.cluster-name)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.cluster-name), $(params.desired-nodes), $(params.max-nodes), $(params.min-nodes), $(params.node-type)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/eks-cluster-teardown/0.1/eks-cluster-teardown.yaml",
      "kind": "Task",
      "name": "eks-cluster-teardown",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/weaveworks/eksctl:0.35.0@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327"
      ],
      "images_pinned": [
        "docker.io/weaveworks/eksctl:0.35.0@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.cluster-name)",
        "$(params.region)",
        "$(params.cluster-name)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.cluster-name), $(params.region)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/flake8/0.1/flake8.yaml",
      "kind": "Task",
      "name": "flake8",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.path)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.path), $(params.requirements_file)"
      ]
    },
    {
      "path": "task/gcloud/0.1/gcloud.yaml",
      "kind": "Task",
      "name": "gcloud",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.gcloud-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gcloud-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcloud/0.2/gcloud.yaml",
      "kind": "Task",
      "name": "gcloud",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.gcloud-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gcloud-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcloud/0.3/gcloud.yaml",
      "kind": "Task",
      "name": "gcloud",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.gcloud-image):$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gcloud-image):$(params.version)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcs-create-bucket/0.1/gcs-create-bucket.yaml",
      "kind": "Task",
      "name": "gcs-create-bucket",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.serviceAccountPath)",
        "$(params.storageClass)",
        "$(params.storageClass)",
        "$(params.region)",
        "$(params.region)",
        "$(params.uniformAccess)",
        "$(params.project)",
        "$(params.bucketName)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.bucketName), $(params.project), $(params.region), $(params.serviceAccountPath), $(params.storageClass)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcs-delete-bucket/0.1/gcs-delete-bucket.yaml",
      "kind": "Task",
      "name": "gcs-delete-bucket",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.serviceAccountPath)",
        "$(params.bucketName)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.bucketName), $(params.serviceAccountPath)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcs-download/0.1/gcs-download.yaml",
      "kind": "Task",
      "name": "gcs-download",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.serviceAccountPath)",
        "$(params.path)",
        "$(params.typeDir)",
        "$(params.location)",
        "$(params.location)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.location), $(params.path), $(params.serviceAccountPath), $(params.typeDir)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcs-generic/0.1/gcs-generic.yaml",
      "kind": "Task",
      "name": "gcs-generic",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.image)",
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)",
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.serviceAccountPath)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.serviceAccountPath)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcs-upload/0.1/gcs-upload.yaml",
      "kind": "Task",
      "name": "gcs-upload",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.serviceAccountPath)",
        "$(params.path)",
        "$(params.location)",
        "$(params.location)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.location), $(params.path), $(params.serviceAccountPath)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcs-upload/0.2/gcs-upload.yaml",
      "kind": "Task",
      "name": "gcs-upload",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gcs-upload/0.3/gcs-upload.yaml",
      "kind": "Task",
      "name": "gcs-upload",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/generate-build-id/0.1/generate-build-id.yaml",
      "kind": "Task",
      "name": "generate-build-id",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-batch-merge/0.1/git-batch-merge.yaml",
      "kind": "Task",
      "name": "git-batch-merge",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.14.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.14.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.subdirectory)",
        "$(params.deleteExisting)",
        "$(params.batchedRefs)",
        "$(params.refspec)",
        "$(params.url)",
        "$(params.revision)",
        "$(params.sslVerify)",
        "$(params.submodules)",
        "$(params.depth)",
        "$(params.gitUserName)",
        "$(params.gitUserEmail)",
        "$(params.mode)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.batchedRefs), $(params.deleteExisting), $(params.depth), $(params.gitUserEmail), $(params.gitUserName)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/git-batch-merge/0.2/git-batch-merge.yaml",
      "kind": "Task",
      "name": "git-batch-merge",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [
        "$(params.subdirectory)",
        "$(params.deleteExisting)",
        "$(params.batchedRefs)",
        "$(params.refspec)",
        "$(params.url)",
        "$(params.revision)",
        "$(params.sslVerify)",
        "$(params.submodules)",
        "$(params.depth)",
        "$(params.gitUserName)",
        "$(params.gitUserEmail)",
        "$(params.mode)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.batchedRefs), $(params.deleteExisting), $(params.depth), $(params.gitUserEmail), $(params.gitUserName)"
      ]
    },
    {
      "path": "task/git-batch-merge/0.3/git-batch-merge.yaml",
      "kind": "Task",
      "name": "git-batch-merge",
      "version": "0.3",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [
        "$(params.subdirectory)",
        "$(params.deleteExisting)",
        "$(params.batchedRefs)",
        "$(params.refspec)",
        "$(params.url)",
        "$(params.revision)",
        "$(params.sslVerify)",
        "$(params.submodules)",
        "$(params.depth)",
        "$(params.gitUserName)",
        "$(params.gitUserEmail)",
        "$(params.mode)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.batchedRefs), $(params.deleteExisting), $(params.depth), $(params.gitUserEmail), $(params.gitUserName)"
      ]
    },
    {
      "path": "task/git-cli/0.1/git-cli.yaml",
      "kind": "Task",
      "name": "git-cli",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BASE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BASE_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.GIT_USER_EMAIL)",
        "$(params.GIT_USER_NAME)",
        "$(params.GIT_SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)"
      ]
    },
    {
      "path": "task/git-cli/0.2/git-cli.yaml",
      "kind": "Task",
      "name": "git-cli",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BASE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BASE_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.GIT_USER_EMAIL)",
        "$(params.GIT_USER_NAME)",
        "$(params.GIT_SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)"
      ]
    },
    {
      "path": "task/git-cli/0.3/git-cli.yaml",
      "kind": "Task",
      "name": "git-cli",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BASE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BASE_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.GIT_USER_EMAIL)",
        "$(params.GIT_USER_NAME)",
        "$(params.GIT_SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)"
      ]
    },
    {
      "path": "task/git-cli/0.4/git-cli.yaml",
      "kind": "Task",
      "name": "git-cli",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BASE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BASE_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.GIT_USER_EMAIL)",
        "$(params.GIT_USER_NAME)",
        "$(params.GIT_SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)"
      ]
    },
    {
      "path": "task/git-clone/0.1/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.10/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.10",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": []
    },
    {
      "path": "task/git-clone/0.2/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.3/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.4/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.5/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.5",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.6/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.6",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.7/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.7",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.8/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.8",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-clone/0.9/git-clone.yaml",
      "kind": "Task",
      "name": "git-clone",
      "version": "0.9",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/git-rebase/0.1/git-rebase.yaml",
      "kind": "Task",
      "name": "git-rebase",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "cgr.dev/chainguard/git:2.39@sha256:fdaef225e3fd5cf190520553ff765f186a4363390af3f19912897b0b28f87aeb"
      ],
      "images_pinned": [
        "cgr.dev/chainguard/git:2.39@sha256:fdaef225e3fd5cf190520553ff765f186a4363390af3f19912897b0b28f87aeb"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GIT_USER_EMAIL)",
        "$(params.GIT_USER_NAME)",
        "$(params.SQUASH_COUNT)",
        "$(params.SQUASH_COUNT)",
        "$(params.COMMIT_MSG)",
        "$(params.PULL_REMOTE_NAME)",
        "$(params.PULL_REMOTE_NAME)",
        "$(params.PULL_REMOTE_URL)",
        "$(params.PULL_REMOTE_NAME)",
        "$(params.PULL_BRANCH_NAME)",
        "$(params.PUSH_REMOTE_NAME)",
        "$(params.PUSH_REMOTE_NAME)",
        "$(params.PUSH_REMOTE_URL)",
        "$(params.PUSH_REMOTE_NAME)",
        "$(params.PUSH_BRANCH_NAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.COMMIT_MSG), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME), $(params.PULL_BRANCH_NAME), $(params.PULL_REMOTE_NAME)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/git-version/0.1/git-version.yaml",
      "kind": "Task",
      "name": "git-version",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/gitea-set-status/0.1/gitea-set-status.yaml",
      "kind": "Task",
      "name": "gitea-set-status",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SHEBANG)",
        "$(params.GITEA_TOKEN_SECRET_KEY)",
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)",
        "$(params.STATE)",
        "$(params.TARGET_URL)",
        "$(params.DESCRIPTION)",
        "$(params.CONTEXT)",
        "$(params.GITEA_HTTPS_OR_HTTP)",
        "$(params.GITEA_HOST_URL)",
        "$(params.GITEA_HOST_URL)",
        "$(params.STATE)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITEA_HOST_URL), $(params.GITEA_HTTPS_OR_HTTP)"
      ]
    },
    {
      "path": "task/github-add-comment/0.1/github-add-comment.yaml",
      "kind": "Task",
      "name": "github-add-comment",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.COMMENT)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.COMMENT), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-comment/0.2/github-add-comment.yaml",
      "kind": "Task",
      "name": "github-add-comment",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.COMMENT)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.COMMENT), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-comment/0.3/github-add-comment.yaml",
      "kind": "Task",
      "name": "github-add-comment",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.COMMENT_OR_FILE)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.COMMENT_OR_FILE), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-comment/0.4/github-add-comment.yaml",
      "kind": "Task",
      "name": "github-add-comment",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.COMMENT_OR_FILE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPLACE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL), $(params.REPLACE), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-comment/0.5/github-add-comment.yaml",
      "kind": "Task",
      "name": "github-add-comment",
      "version": "0.5",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.COMMENT_OR_FILE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPLACE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL), $(params.REPLACE), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-comment/0.6/github-add-comment.yaml",
      "kind": "Task",
      "name": "github-add-comment",
      "version": "0.6",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.AUTH_TYPE)",
        "$(params.REQUEST_URL)",
        "$(params.COMMENT_OR_FILE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPLACE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.AUTH_TYPE), $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL), $(params.REPLACE)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-comment/0.7/github-add-comment.yaml",
      "kind": "Task",
      "name": "github-add-comment",
      "version": "0.7",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.AUTH_TYPE)",
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.COMMENT_OR_FILE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPLACE)",
        "$(params.COMMENT_TAG)",
        "$(params.COMMENT_TAG)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-gist/0.1/github-add-gist.yaml",
      "kind": "Task",
      "name": "github-add-gist",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.FILE_NAME)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.API_PATH_PREFIX)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.FILE_NAME), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-gist/0.2/github-add-gist.yaml",
      "kind": "Task",
      "name": "github-add-gist",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.FILE_NAME)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.API_PATH_PREFIX)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.FILE_NAME), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-add-labels/0.1/github-add-labels.yaml",
      "kind": "Task",
      "name": "github-add-labels",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-app-token/0.1/github-app-token.yaml",
      "kind": "Task",
      "name": "github-app-token",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88"
      ],
      "images_pinned": [
        "quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-app-token/0.2/github-app-token.yaml",
      "kind": "Task",
      "name": "github-app-token",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88"
      ],
      "images_pinned": [
        "quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-close-issue/0.1/github-close-issue.yaml",
      "kind": "Task",
      "name": "github-close-issue",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-close-issue/0.2/github-close-issue.yaml",
      "kind": "Task",
      "name": "github-close-issue",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-create-deployment/0.1/github-create-deployment.yaml",
      "kind": "Task",
      "name": "github-create-deployment",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REPO_FULL_NAME)",
        "$(params.REQUIRED_CONTEXTS)",
        "$(params.REQUIRED_CONTEXTS)",
        "$(params.REQUIRED_CONTEXTS)",
        "$(params.PAYLOAD)",
        "$(params.PAYLOAD)",
        "$(params.REF)",
        "$(params.TASK)",
        "$(params.AUTO_MERGE)",
        "$(params.ENVIRONMENT)",
        "$(params.DESCRIPTION)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPO_FULL_NAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.AUTO_MERGE), $(params.DESCRIPTION), $(params.ENVIRONMENT), $(params.GITHUB_HOST_URL), $(params.PAYLOAD)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-create-deployment/0.2/github-create-deployment.yaml",
      "kind": "Task",
      "name": "github-create-deployment",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.REQUIRED_CONTEXTS)",
        "$(params.REQUIRED_CONTEXTS)",
        "$(params.REQUIRED_CONTEXTS)",
        "$(params.PAYLOAD)",
        "$(params.PAYLOAD)",
        "$(params.REF)",
        "$(params.TASK)",
        "$(params.AUTO_MERGE)",
        "$(params.ENVIRONMENT)",
        "$(params.DESCRIPTION)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPO_FULL_NAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTO_MERGE), $(params.DESCRIPTION), $(params.ENVIRONMENT), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-create-deployment-status/0.1/github-create-deployment-status.yaml",
      "kind": "Task",
      "name": "github-create-deployment-status",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.DEPLOYMENT_ID)",
        "$(params.STATE)",
        "$(params.LOG_URL)",
        "$(params.DESCRIPTION)",
        "$(params.ENVIRONMENT_URL)",
        "$(params.AUTO_INACTIVE)",
        "$(params.ENVIRONMENT)",
        "$(params.ENVIRONMENT)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPO_FULL_NAME)",
        "$(params.DEPLOYMENT_ID)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTO_INACTIVE), $(params.DEPLOYMENT_ID), $(params.DESCRIPTION), $(params.ENVIRONMENT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-open-pr/0.1/github-open-pr.yaml",
      "kind": "Task",
      "name": "github-open-pr",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GITHUB_TOKEN_SECRET_KEY)",
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.HEAD)",
        "$(params.BASE)",
        "$(params.TITLE)",
        "$(params.BODY)",
        "$(params.AUTH_TYPE)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPO_FULL_NAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.BASE), $(params.BODY), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-open-pr/0.2/github-open-pr.yaml",
      "kind": "Task",
      "name": "github-open-pr",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GITHUB_TOKEN_SECRET_KEY)",
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.HEAD)",
        "$(params.BASE)",
        "$(params.TITLE)",
        "$(params.BODY)",
        "$(params.AUTH_TYPE)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.REPO_FULL_NAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.BASE), $(params.BODY), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/github-request-reviewers/0.1/github-request-reviewers.yaml",
      "kind": "Task",
      "name": "github-request-reviewers",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "docker.io/library/python:3.9-alpine3.13@sha256:437482dd314471f5f10967f7376489d9e7f67c111850c123cc725a1741b66aac"
      ],
      "images_pinned": [
        "docker.io/library/python:3.9-alpine3.13@sha256:437482dd314471f5f10967f7376489d9e7f67c111850c123cc725a1741b66aac"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GITHUB_TOKEN_FILE)",
        "$(params.API_PATH_PREFIX)",
        "$(params.PACKAGE)",
        "$(params.PULL_REQUEST_NUMBER)",
        "$(params.REVIEWERS)",
        "$(params.TEAM_REVIEWERS)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.PULL_REQUEST_NUMBER)",
        "$(params.PACKAGE)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.GITHUB_TOKEN_FILE), $(params.PACKAGE), $(params.PULL_REQUEST_NUMBER)"
      ]
    },
    {
      "path": "task/github-set-status/0.1/github-set-status.yaml",
      "kind": "Task",
      "name": "github-set-status",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)",
        "$(params.STATE)",
        "$(params.TARGET_URL)",
        "$(params.DESCRIPTION)",
        "$(params.CONTEXT)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.STATE)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITHUB_HOST_URL), $(params.REPO_FULL_NAME)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-set-status/0.2/github-set-status.yaml",
      "kind": "Task",
      "name": "github-set-status",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GITHUB_TOKEN_SECRET_KEY)",
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)",
        "$(params.STATE)",
        "$(params.TARGET_URL)",
        "$(params.DESCRIPTION)",
        "$(params.CONTEXT)",
        "$(params.AUTH_TYPE)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.STATE)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-set-status/0.3/github-set-status.yaml",
      "kind": "Task",
      "name": "github-set-status",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/python-38:1-34.1599745032"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GITHUB_TOKEN_SECRET_KEY)",
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)",
        "$(params.STATE)",
        "$(params.TARGET_URL)",
        "$(params.DESCRIPTION)",
        "$(params.CONTEXT)",
        "$(params.AUTH_TYPE)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.STATE)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITHUB_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/github-set-status/0.4/github-set-status.yaml",
      "kind": "Task",
      "name": "github-set-status",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SHEBANG)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)",
        "$(params.GITHUB_HOST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.GITHUB_HOST_URL), $(params.SHEBANG)"
      ]
    },
    {
      "path": "task/gitlab-add-label/0.1/gitlab-add-label.yaml",
      "kind": "Task",
      "name": "gitlab-add-label",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.REQUEST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.GITLAB_HOST_URL)",
        "$(params.REQUEST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITLAB_HOST_URL), $(params.REQUEST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gitlab-set-status/0.1/gitlab-set-status.yaml",
      "kind": "Task",
      "name": "gitlab-set-status",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef"
      ],
      "images_pinned": [
        "registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GITLAB_HOST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)",
        "$(params.STATE)",
        "$(params.CONTEXT)",
        "$(params.TARGET_URL)",
        "$(params.DESCRIPTION)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITLAB_HOST_URL), $(params.REPO_FULL_NAME)"
      ]
    },
    {
      "path": "task/gitlab-set-status/0.2/gitlab-set-status.yaml",
      "kind": "Task",
      "name": "gitlab-set-status",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef"
      ],
      "images_pinned": [
        "registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.GITLAB_HOST_URL)",
        "$(params.API_PATH_PREFIX)",
        "$(params.REPO_FULL_NAME)",
        "$(params.SHA)",
        "$(params.STATE)",
        "$(params.CONTEXT)",
        "$(params.TARGET_URL)",
        "$(params.DESCRIPTION)",
        "$(params.COVERAGE)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.COVERAGE), $(params.DESCRIPTION), $(params.GITLAB_HOST_URL)"
      ]
    },
    {
      "path": "task/gitleaks/0.1/gitleaks.yaml",
      "kind": "Task",
      "name": "gitleaks",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "docker.io/zricethezav/gitleaks:v7.5.0@sha256:55b2e1831c7395f17e9da3649924736b396b25be69efdc7a0137073fe0b0f456"
      ],
      "images_pinned": [
        "docker.io/zricethezav/gitleaks:v7.5.0@sha256:55b2e1831c7395f17e9da3649924736b396b25be69efdc7a0137073fe0b0f456"
      ],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.config_file_url)",
        "$(params.config_file_url)",
        "$(params.config_file_path)",
        "$(params.config_file_url)",
        "$(params.config_file_path)",
        "$(params.repo_path)",
        "$(params.config_file_path)",
        "$(params.output_format)",
        "$(params.report_output_path)",
        "$(params.report_output_path)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.config_file_path), $(params.config_file_url), $(params.output_format), $(params.repo_path), $(params.report_output_path)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/gke-cluster-create/0.1/gke-cluster-create.yaml",
      "kind": "Task",
      "name": "gke-cluster-create",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.identifier)",
        "$(params.private-key-path)",
        "$(params.project-name)",
        "$(params.project-name)",
        "$(params.cluster-version)",
        "$(params.min-nodes)",
        "$(params.max-nodes)",
        "$(params.region)",
        "$(params.machine-type)",
        "$(params.image-type)",
        "$(params.project-name)",
        "$(params.region)",
        "$(params.project-name)",
        "$(params.project-name)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.cluster-version), $(params.identifier), $(params.image-type), $(params.machine-type), $(params.max-nodes)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gke-deploy/0.1/gke-deploy.yaml",
      "kind": "Task",
      "name": "gke-deploy",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "gcr.io/cloud-builders/gke-deploy@sha256:6d18a1efabf8a7ea7f2169c93f3e01fc5b8247b12099618c496ab097aaae341f"
      ],
      "images_pinned": [
        "gcr.io/cloud-builders/gke-deploy@sha256:6d18a1efabf8a7ea7f2169c93f3e01fc5b8247b12099618c496ab097aaae341f"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gogit/0.1/gogit.yaml",
      "kind": "Task",
      "name": "gogit",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.gogit-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gogit-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/golang-build/0.1/golang-build.yaml",
      "kind": "Task",
      "name": "golang-build",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/golang:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/library/golang:$(params.version)"
      ],
      "script_param_injection": [
        "$(params.package)",
        "$(params.flags)",
        "$(params.packages)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags), $(params.package), $(params.packages)"
      ]
    },
    {
      "path": "task/golang-build/0.2/golang-build.yaml",
      "kind": "Task",
      "name": "golang-build",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/golang:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/library/golang:$(params.version)"
      ],
      "script_param_injection": [
        "$(params.package)",
        "$(params.package)",
        "$(params.flags)",
        "$(params.packages)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags), $(params.package), $(params.packages)"
      ]
    },
    {
      "path": "task/golang-build/0.3/golang-build.yaml",
      "kind": "Task",
      "name": "golang-build",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/golang:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/library/golang:$(params.version)"
      ],
      "script_param_injection": [
        "$(params.package)",
        "$(params.package)",
        "$(params.flags)",
        "$(params.packages)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags), $(params.package), $(params.packages)"
      ]
    },
    {
      "path": "task/golang-fuzz/0.1/golang-fuzz.yaml",
      "kind": "Task",
      "name": "golang-fuzz",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/golang:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/library/golang:$(params.version)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/golang-test/0.1/golang-test.yaml",
      "kind": "Task",
      "name": "golang-test",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/golang:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/library/golang:$(params.version)"
      ],
      "script_param_injection": [
        "$(params.package)",
        "$(params.context)",
        "$(params.context)",
        "$(params.flags)",
        "$(params.packages)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.context), $(params.flags), $(params.package), $(params.packages)"
      ]
    },
    {
      "path": "task/golang-test/0.2/golang-test.yaml",
      "kind": "Task",
      "name": "golang-test",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/library/golang:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/library/golang:$(params.version)"
      ],
      "script_param_injection": [
        "$(params.package)",
        "$(params.package)",
        "$(params.context)",
        "$(params.flags)",
        "$(params.packages)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.context), $(params.flags), $(params.package), $(params.packages)"
      ]
    },
    {
      "path": "task/golangci-lint/0.1/golangci-lint.yaml",
      "kind": "Task",
      "name": "golangci-lint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/golangci/golangci-lint:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/golangci/golangci-lint:$(params.version)"
      ],
      "script_param_injection": [
        "$(params.flags)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags)"
      ]
    },
    {
      "path": "task/golangci-lint/0.2/golangci-lint.yaml",
      "kind": "Task",
      "name": "golangci-lint",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/golangci/golangci-lint:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/golangci/golangci-lint:$(params.version)"
      ],
      "script_param_injection": [
        "$(params.flags)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags)"
      ]
    },
    {
      "path": "task/goreleaser/0.1/goreleaser.yaml",
      "kind": "Task",
      "name": "goreleaser",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/goreleaser/goreleaser@sha256:8a596892311c6a5ca45f531eeaf415138e3ea04f3f3d7bd11b46ec320e2d593f",
        "docker.io/goreleaser/goreleaser@sha256:1705d73d62a271d9b4684534d9ed3f5fef943e353d22d79693b8d48d730f4db1"
      ],
      "images_pinned": [
        "docker.io/goreleaser/goreleaser@sha256:8a596892311c6a5ca45f531eeaf415138e3ea04f3f3d7bd11b46ec320e2d593f",
        "docker.io/goreleaser/goreleaser@sha256:1705d73d62a271d9b4684534d9ed3f5fef943e353d22d79693b8d48d730f4db1"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.flags)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/goreleaser/0.2/goreleaser.yaml",
      "kind": "Task",
      "name": "goreleaser",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.image)",
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)",
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.flags)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.flags)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/gradle/0.1/gradle.yaml",
      "kind": "Task",
      "name": "gradle",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.GRADLE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.GRADLE_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/gradle/0.2/gradle.yaml",
      "kind": "Task",
      "name": "gradle",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.GRADLE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.GRADLE_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/gradle/0.3/gradle.yaml",
      "kind": "Task",
      "name": "gradle",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.GRADLE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.GRADLE_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/gradle/0.4/gradle.yaml",
      "kind": "Task",
      "name": "gradle",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.GRADLE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.GRADLE_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/grype/0.1/grype.yaml",
      "kind": "Task",
      "name": "grype",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.GRYPE_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.GRYPE_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/hadolint/0.1/hadolint.yaml",
      "kind": "Task",
      "name": "hadolint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/helm-conftest/0.1/helm-conftest.yaml",
      "kind": "Task",
      "name": "helm-conftest",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/instrumenta/helm-conftest@sha256:11cb9fd6d101d80af87931db359d4b3ad9a843cf0eb1ea0ab7173424eb379948"
      ],
      "images_pinned": [
        "docker.io/instrumenta/helm-conftest@sha256:11cb9fd6d101d80af87931db359d4b3ad9a843cf0eb1ea0ab7173424eb379948"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/helm-render-manifests-from-repo/0.1/helm-render-manifests-from-repo.yaml",
      "kind": "Task",
      "name": "helm-render-manifests-from-repo",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.helm_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.helm_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": []
    },
    {
      "path": "task/helm-upgrade-from-repo/0.1/helm-upgrade-from-repo.yaml",
      "kind": "Task",
      "name": "helm-upgrade-from-repo",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/lachlanevenson/k8s-helm:$(inputs.params.helm_version)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "docker.io/lachlanevenson/k8s-helm:$(inputs.params.helm_version)"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/helm-upgrade-from-repo/0.2/helm-upgrade-from-repo.yaml",
      "kind": "Task",
      "name": "helm-upgrade-from-repo",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.helm_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.helm_image)"
      ],
      "script_param_injection": [
        "$(params.release_namespace)",
        "$(params.chart_name)",
        "$(params.helm_repo)",
        "$(params.release_namespace)",
        "$(params.release_name)",
        "$(params.chart_name)",
        "$(params.overwrite_values)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.chart_name), $(params.helm_repo), $(params.overwrite_values), $(params.release_name), $(params.release_namespace)"
      ]
    },
    {
      "path": "task/helm-upgrade-from-repo/0.3/helm-upgrade-from-repo.yaml",
      "kind": "Task",
      "name": "helm-upgrade-from-repo",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.helm_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.helm_image)"
      ],
      "script_param_injection": [
        "$(params.release_namespace)",
        "$(params.chart_name)",
        "$(params.helm_repo)",
        "$(params.release_namespace)",
        "$(params.release_name)",
        "$(params.chart_name)",
        "$(params.overwrite_values)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.chart_name), $(params.helm_repo), $(params.overwrite_values), $(params.release_name), $(params.release_namespace)"
      ]
    },
    {
      "path": "task/helm-upgrade-from-source/0.1/helm-upgrade-from-source.yaml",
      "kind": "Task",
      "name": "helm-upgrade-from-source",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/lachlanevenson/k8s-helm:$(inputs.params.helm_version)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "docker.io/lachlanevenson/k8s-helm:$(inputs.params.helm_version)"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/helm-upgrade-from-source/0.2/helm-upgrade-from-source.yaml",
      "kind": "Task",
      "name": "helm-upgrade-from-source",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.helm_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.helm_image)"
      ],
      "script_param_injection": [
        "$(params.release_namespace)",
        "$(params.charts_dir)",
        "$(params.values_file)",
        "$(params.release_namespace)",
        "$(params.release_version)",
        "$(params.release_name)",
        "$(params.charts_dir)",
        "$(params.overwrite_values)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.charts_dir), $(params.overwrite_values), $(params.release_name), $(params.release_namespace), $(params.release_version)"
      ]
    },
    {
      "path": "task/helm-upgrade-from-source/0.3/helm-upgrade-from-source.yaml",
      "kind": "Task",
      "name": "helm-upgrade-from-source",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.helm_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.helm_image)"
      ],
      "script_param_injection": [
        "$(params.release_namespace)",
        "$(params.charts_dir)",
        "$(params.values_file)",
        "$(params.release_namespace)",
        "$(params.release_version)",
        "$(params.release_name)",
        "$(params.charts_dir)",
        "$(params.overwrite_values)",
        "$(params.upgrade_extra_params)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.charts_dir), $(params.overwrite_values), $(params.release_name), $(params.release_namespace), $(params.release_version)"
      ]
    },
    {
      "path": "task/helm-upgrade-from-source/0.4/helm-upgrade-from-source.yaml",
      "kind": "Task",
      "name": "helm-upgrade-from-source",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.helm_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.helm_image)"
      ],
      "script_param_injection": [
        "$(params.release_namespace)",
        "$(params.charts_dir)",
        "$(params.values_file)",
        "$(params.release_namespace)",
        "$(params.release_version)",
        "$(params.release_name)",
        "$(params.charts_dir)",
        "$(params.overwrite_values)",
        "$(params.upgrade_extra_params)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.charts_dir), $(params.overwrite_values), $(params.release_name), $(params.release_namespace), $(params.release_version)"
      ]
    },
    {
      "path": "task/hugo/0.1/hugo.yaml",
      "kind": "Task",
      "name": "hugo",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/hugomods/hugo:0.122.0@sha256:e90f2e6786969463f3475c7d5e7f031cb5dbf75a8394687d52f99d6c9d0eda0d"
      ],
      "images_pinned": [
        "docker.io/hugomods/hugo:0.122.0@sha256:e90f2e6786969463f3475c7d5e7f031cb5dbf75a8394687d52f99d6c9d0eda0d"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": []
    },
    {
      "path": "task/ibmcloud/0.1/ibmcloud.yaml",
      "kind": "Task",
      "name": "ibmcloud",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.ibmcloud-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.ibmcloud-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/istio-canary-release/0.1/istio-canary-release.yaml",
      "kind": "Task",
      "name": "istio-canary-release",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "quay.io/openshift/origin-cli:4.6"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/openshift/origin-cli:4.6"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.VS_NAME)",
        "$(params.V1_WEIGHT)",
        "$(params.V2_WEIGHT)",
        "$(params.V1_WEIGHT)",
        "$(params.V2_WEIGHT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.V1_WEIGHT), $(params.V2_WEIGHT), $(params.VS_NAME)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/jenkins/0.1/jenkins.yaml",
      "kind": "Task",
      "name": "jenkins",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.JENKINS_HOST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.JENKINS_HOST_URL)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/jib-gradle/0.1/jib-gradle.yaml",
      "kind": "Task",
      "name": "jib-gradle",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "gcr.io/cloud-builders/gradle@sha256:797c9936cf33fc30d82a54437541d7ea7f7825c93e3237a89d254b9bc40b0898"
      ],
      "images_pinned": [
        "gcr.io/cloud-builders/gradle@sha256:797c9936cf33fc30d82a54437541d7ea7f7825c93e3237a89d254b9bc40b0898"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.INSECUREREGISTRY)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "$(params) used inside script (injection risk): $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-gradle/0.2/jib-gradle.yaml",
      "kind": "Task",
      "name": "jib-gradle",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.INSECUREREGISTRY)",
        "$(params.IMAGE)",
        "$(params.DIRECTORY)",
        "$(params.DIRECTORY)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.DIRECTORY), $(params.IMAGE), $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-gradle/0.3/jib-gradle.yaml",
      "kind": "Task",
      "name": "jib-gradle",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.INSECUREREGISTRY)",
        "$(params.IMAGE)",
        "$(params.DIRECTORY)",
        "$(params.EXTRA_ARGS)",
        "$(params.DIRECTORY)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.DIRECTORY), $(params.EXTRA_ARGS), $(params.IMAGE), $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-gradle/0.4/jib-gradle.yaml",
      "kind": "Task",
      "name": "jib-gradle",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.INSECUREREGISTRY)",
        "$(params.IMAGE)",
        "$(params.EXTRA_ARGS)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.EXTRA_ARGS), $(params.IMAGE), $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-maven/0.1/jib-maven.yaml",
      "kind": "Task",
      "name": "jib-maven",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.INSECUREREGISTRY)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "$(params) used inside script (injection risk): $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-maven/0.2/jib-maven.yaml",
      "kind": "Task",
      "name": "jib-maven",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.INSECUREREGISTRY)",
        "$(params.IMAGE)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.IMAGE), $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-maven/0.3/jib-maven.yaml",
      "kind": "Task",
      "name": "jib-maven",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CACERTFILE)",
        "$(params.CACERTFILE)",
        "$(params.INSECUREREGISTRY)",
        "$(params.IMAGE)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.CACERTFILE), $(params.IMAGE), $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-maven/0.4/jib-maven.yaml",
      "kind": "Task",
      "name": "jib-maven",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CACERTFILE)",
        "$(params.CACERTFILE)",
        "$(params.INSECUREREGISTRY)",
        "$(params.IMAGE)",
        "$(params.DIRECTORY)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.CACERTFILE), $(params.DIRECTORY), $(params.IMAGE), $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jib-maven/0.5/jib-maven.yaml",
      "kind": "Task",
      "name": "jib-maven",
      "version": "0.5",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)",
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CACERTFILE)",
        "$(params.CACERTFILE)",
        "$(params.INSECUREREGISTRY)",
        "$(params.IMAGE)",
        "$(params.DIRECTORY)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.CACERTFILE), $(params.DIRECTORY), $(params.IMAGE), $(params.INSECUREREGISTRY)"
      ]
    },
    {
      "path": "task/jira-get-ticket-status/0.1/jira-get-ticket-status.yaml",
      "kind": "Task",
      "name": "jira-get-ticket-status",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/python-39@sha256:27e795fd6b1b77de70d1dc73a65e4c790650748a9cfda138fdbd194b3d6eea3d"
      ],
      "images_pinned": [
        "registry.access.redhat.com/ubi8/python-39@sha256:27e795fd6b1b77de70d1dc73a65e4c790650748a9cfda138fdbd194b3d6eea3d"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/jq/0.1/jq.yaml",
      "kind": "Task",
      "name": "jq",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.input)",
        "$(params.stringOrFile)",
        "$(params.stringOrFile)",
        "$(params.stringOrFile)",
        "$(params.input)",
        "$(params.options)",
        "$(params.filter)",
        "$(params.options)",
        "$(params.filter)",
        "$(params.input)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.filter), $(params.input), $(params.options), $(params.stringOrFile)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/jumpstarter-get-lease/0.1/jumpstarter-get-lease.yaml",
      "kind": "Task",
      "name": "jumpstarter-get-lease",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": false,
      "has_categories": false,
      "has_tags": false,
      "has_display_name": false,
      "has_platforms": false,
      "has_description": false,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "quay.io/jumpstarter-dev/jumpstarter:latest"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [
        "quay.io/jumpstarter-dev/jumpstarter:latest"
      ],
      "images_param": [],
      "script_param_injection": [
        "$(params.client-name)",
        "$(params.client-name)",
        "$(params.timeout)",
        "$(params.lease-duration)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.client-name), $(params.lease-duration), $(params.timeout)",
        "unpinned :latest/no-tag image(s): 1",
        "missing tekton.dev/pipelines.minVersion",
        "missing spec.description",
        "missing tekton.dev/categories",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/jumpstarter-release-lease/0.1/jumpstarter-release-lease.yaml",
      "kind": "Task",
      "name": "jumpstarter-release-lease",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": false,
      "has_categories": false,
      "has_tags": false,
      "has_display_name": false,
      "has_platforms": false,
      "has_description": false,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "quay.io/jumpstarter-dev/jumpstarter:latest"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [
        "quay.io/jumpstarter-dev/jumpstarter:latest"
      ],
      "images_param": [],
      "script_param_injection": [
        "$(params.jmp-lease-id)",
        "$(params.client-name)",
        "$(params.client-name)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.client-name), $(params.jmp-lease-id)",
        "unpinned :latest/no-tag image(s): 1",
        "missing tekton.dev/pipelines.minVersion",
        "missing spec.description",
        "missing tekton.dev/categories",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/jumpstarter-run-cmd/0.1/jumpstarter-run-cmd.yaml",
      "kind": "Task",
      "name": "jumpstarter-run-command",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": false,
      "has_categories": false,
      "has_tags": false,
      "has_display_name": false,
      "has_platforms": false,
      "has_description": false,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.client-name)",
        "$(params.client-name)",
        "$(params.jmp-lease-id)",
        "$(params.jmp-jScript)",
        "$(params.jmp-jScript)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.client-name), $(params.jmp-jScript), $(params.jmp-lease-id)",
        "missing tekton.dev/pipelines.minVersion",
        "missing spec.description",
        "missing tekton.dev/categories",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/kamel-run/0.1/kamel-run.yaml",
      "kind": "Task",
      "name": "kamel-run",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.camel-k-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.camel-k-image)"
      ],
      "script_param_injection": [
        "$(params.filename)",
        "$(params.namespace)",
        "$(params.namespace)",
        "$(params.container-image)",
        "$(params.container-image)",
        "$(params.wait)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.container-image), $(params.filename), $(params.namespace), $(params.wait)"
      ]
    },
    {
      "path": "task/kaniko/0.1/kaniko.yaml",
      "kind": "Task",
      "name": "kaniko",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2",
        "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09"
      ],
      "images_pinned": [
        "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09"
      ],
      "images_mutable": [
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CONTEXT)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.CONTEXT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/kaniko/0.2/kaniko.yaml",
      "kind": "Task",
      "name": "kaniko",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2",
        "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09"
      ],
      "images_pinned": [
        "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09"
      ],
      "images_mutable": [
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CONTEXT)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.CONTEXT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/kaniko/0.3/kaniko.yaml",
      "kind": "Task",
      "name": "kaniko",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2",
        "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09"
      ],
      "images_pinned": [
        "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09"
      ],
      "images_mutable": [
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CONTEXT)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.CONTEXT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/kaniko/0.4/kaniko.yaml",
      "kind": "Task",
      "name": "kaniko",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.18.0",
        "$(params.JQ_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.18.0"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.JQ_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.CONTEXT)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.CONTEXT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/kaniko/0.5/kaniko.yaml",
      "kind": "Task",
      "name": "kaniko",
      "version": "0.5",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/kaniko/0.6/kaniko.yaml",
      "kind": "Task",
      "name": "kaniko",
      "version": "0.6",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "docker.io/library/bash:5.1.4@sha256:c523c636b722339f41b6a431b44588ab2f762c5de5ec3bd7964420ff982fb1d9"
      ],
      "images_pinned": [
        "docker.io/library/bash:5.1.4@sha256:c523c636b722339f41b6a431b44588ab2f762c5de5ec3bd7964420ff982fb1d9"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.IMAGE)"
      ]
    },
    {
      "path": "task/kaniko/0.7/kaniko.yaml",
      "kind": "Task",
      "name": "kaniko",
      "version": "0.7",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)",
        "$(params.WRITER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)",
        "$(params.WRITER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "$(params) used inside script (injection risk): $(params.IMAGE)"
      ]
    },
    {
      "path": "task/kind/0.1/kind.yaml",
      "kind": "Task",
      "name": "kind",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/kn/0.1/kn.yaml",
      "kind": "Task",
      "name": "kn",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.kn-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.kn-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/kn/0.2/kn.yaml",
      "kind": "Task",
      "name": "kn",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.kn-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.kn-image)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/kn-apply/0.1/kn-apply.yaml",
      "kind": "Task",
      "name": "kn-apply",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.KN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.KN_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/kn-apply/0.2/kn-apply.yaml",
      "kind": "Task",
      "name": "kn-apply",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.KN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.KN_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/ko/0.1/ko.yaml",
      "kind": "Task",
      "name": "ko",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.ko-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.ko-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/kube-linter/0.1/kube-linter.yaml",
      "kind": "Task",
      "name": "kube-linter",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "docker.io/stackrox/kube-linter:0.2.2-2-g7d10a69154-alpine@sha256:e520e9d8d3a2dfa611914836536545b135845e7bda9f1df34b060e116232dbf0"
      ],
      "images_pinned": [
        "docker.io/stackrox/kube-linter:0.2.2-2-g7d10a69154-alpine@sha256:e520e9d8d3a2dfa611914836536545b135845e7bda9f1df34b060e116232dbf0"
      ],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.config_file_url)",
        "$(params.config_file_url)",
        "$(params.config_file_path)",
        "$(params.config_file_url)",
        "$(params.config_file_path)",
        "$(params.config_file_path)",
        "$(params.manifest)",
        "$(params.config_file_path)",
        "$(params.output_format)",
        "$(params.default_option)",
        "$(params.manifest)",
        "$(params.default_option)",
        "$(params.includelist)",
        "$(params.excludelist)",
        "$(params.output_format)",
        "$(params.manifest)",
        "$(params.includelist)",
        "$(params.excludelist)",
        "$(params.output_format)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.config_file_path), $(params.config_file_url), $(params.default_option), $(params.excludelist), $(params.includelist)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/kubeconfig-creator/0.1/kubeconfig-creator.yaml",
      "kind": "Task",
      "name": "kubeconfig-creator",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/kubeconfig-creator/0.2/kubeconfig-creator.yaml",
      "kind": "Task",
      "name": "kubeconfig-creator",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": []
    },
    {
      "path": "task/kubectl-deploy-pod/0.1/kubectl-deploy-pod.yaml",
      "kind": "Task",
      "name": "kubectl-deploy-pod",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/kubernetes-actions/0.1/kubernetes-actions.yaml",
      "kind": "Task",
      "name": "kubernetes-actions",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.script)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.script)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/kubernetes-actions/0.2/kubernetes-actions.yaml",
      "kind": "Task",
      "name": "kubernetes-actions",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.script)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.script)"
      ]
    },
    {
      "path": "task/kubeval/0.1/kubeval.yaml",
      "kind": "Task",
      "name": "kubeval",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/kythe-go/0.1/kythe-go.yaml",
      "kind": "Task",
      "name": "kythe-go",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/kythe-go/0.2/kythe-go.yaml",
      "kind": "Task",
      "name": "kythe-go",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "gcr.io/kythe-public/golang-extractor:git-8697a6c4b15caf12b59d8e32b9ac0ee4aa9306bc@sha256:e56f0afbae2408288828065a40dddb6d864aef12dc84c412f48fd6e664184dc3"
      ],
      "images_pinned": [
        "gcr.io/kythe-public/golang-extractor:git-8697a6c4b15caf12b59d8e32b9ac0ee4aa9306bc@sha256:e56f0afbae2408288828065a40dddb6d864aef12dc84c412f48fd6e664184dc3"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/makisu/0.1/makisu.yaml",
      "kind": "Task",
      "name": "makisu",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/markdown-lint/0.1/markdown-lint.yaml",
      "kind": "Task",
      "name": "markdown-lint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/maven/0.1/maven.yaml",
      "kind": "Task",
      "name": "maven",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_PROTOCOL)",
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.MAVEN_MIRROR_URL)",
        "$(params.MAVEN_MIRROR_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/maven/0.2/maven.yaml",
      "kind": "Task",
      "name": "maven",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_PROTOCOL)",
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.SERVER_USER)",
        "$(params.SERVER_PASSWORD)",
        "$(params.SERVER_USER)",
        "$(params.SERVER_PASSWORD)",
        "$(params.MAVEN_MIRROR_URL)",
        "$(params.MAVEN_MIRROR_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/maven/0.3/maven.yaml",
      "kind": "Task",
      "name": "maven",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_PROTOCOL)",
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.SERVER_USER)",
        "$(params.SERVER_PASSWORD)",
        "$(params.SERVER_USER)",
        "$(params.SERVER_PASSWORD)",
        "$(params.MAVEN_MIRROR_URL)",
        "$(params.MAVEN_MIRROR_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/maven/0.4/maven.yaml",
      "kind": "Task",
      "name": "maven",
      "version": "0.4",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "$(params.MAVEN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.MAVEN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_PROTOCOL)",
        "$(params.PROXY_HOST)",
        "$(params.PROXY_PORT)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_USER)",
        "$(params.PROXY_PASSWORD)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.PROXY_NON_PROXY_HOSTS)",
        "$(params.SERVER_USER)",
        "$(params.SERVER_PASSWORD)",
        "$(params.SERVER_USER)",
        "$(params.SERVER_PASSWORD)",
        "$(params.MAVEN_MIRROR_URL)",
        "$(params.MAVEN_MIRROR_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/mypy-lint/0.1/mypy-lint.yaml",
      "kind": "Task",
      "name": "mypy-lint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/mypy-lint/0.2/mypy-lint.yaml",
      "kind": "Task",
      "name": "mypy-lint",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.requirements_file)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.requirements_file)"
      ]
    },
    {
      "path": "task/nexus-lifecycle-scan/0.1/nexus-lifecycle-scan.yaml",
      "kind": "Task",
      "name": "nexus-lifecycle-scan",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": false,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/sonatype/nexus-iq-cli:1.136.0-01"
      ],
      "images_pinned": [],
      "images_mutable": [
        "docker.io/sonatype/nexus-iq-cli:1.136.0-01"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/npm/0.1/npm.yaml",
      "kind": "Task",
      "name": "npm",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/oci-cli/0.1/oci-cli.yaml",
      "kind": "Task",
      "name": "oci-cli",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "ghcr.io/oracle/oci-cli:sha-5846bb2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "ghcr.io/oracle/oci-cli:sha-5846bb2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "mutable-tag image(s) (not digest-pinned): 1",
        "missing spec.description",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/openshift-client/0.1/openshift-client.yaml",
      "kind": "Task",
      "name": "openshift-client",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "quay.io/openshift/origin-cli:$(params.VERSION)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "quay.io/openshift/origin-cli:$(params.VERSION)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)"
      ]
    },
    {
      "path": "task/openshift-client/0.2/openshift-client.yaml",
      "kind": "Task",
      "name": "openshift-client",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "quay.io/openshift/origin-cli:$(params.VERSION)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "quay.io/openshift/origin-cli:$(params.VERSION)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)"
      ]
    },
    {
      "path": "task/openshift-client-kubecfg/0.1/openshift-client-kubecfg.yaml",
      "kind": "Task",
      "name": "openshift-client-kubecfg",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "quay.io/openshift/origin-cli:4.6"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/openshift/origin-cli:4.6"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/openshift-client-python/0.1/openshift-client-python.yaml",
      "kind": "Task",
      "name": "openshift-client-python",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "quay.io/vinamra2807/openshift-client-python@sha256:17c6b464c2fa930d09203b75b68dbcf120c46a4e8fe56b60fb4e5d0015798343"
      ],
      "images_pinned": [
        "quay.io/vinamra2807/openshift-client-python@sha256:17c6b464c2fa930d09203b75b68dbcf120c46a4e8fe56b60fb4e5d0015798343"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/openshift-install/0.1/openshift-install.yaml",
      "kind": "Task",
      "name": "openshift-install",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "$(params.OPENSHIFT_INSTALLER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.OPENSHIFT_INSTALLER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.PLATFORM)",
        "$(params.PROJECT_ID)",
        "$(params.BASE_DOMAIN)",
        "$(params.REPLICAS)",
        "$(params.REPLICAS)",
        "$(params.CLUSTER_NAME)",
        "$(params.PLATFORM)",
        "$(params.REGION)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.BASE_DOMAIN), $(params.CLUSTER_NAME), $(params.PLATFORM), $(params.PROJECT_ID), $(params.REGION)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/openshift-uninstall/0.1/openshift-uninstall.yaml",
      "kind": "Task",
      "name": "openshift-uninstall",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.OPENSHIFT_INSTALLER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.OPENSHIFT_INSTALLER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": true,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/oracle-cloud-storage-download/0.1/oracle-cloud-storage-download.yaml",
      "kind": "Task",
      "name": "oracle-cloud-storage-download",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/oracle-cloud-storage-download/0.2/oracle-cloud-storage-download.yaml",
      "kind": "Task",
      "name": "oracle-cloud-storage-download",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/oracle-cloud-storage-upload/0.1/oracle-cloud-storage-upload.yaml",
      "kind": "Task",
      "name": "oracle-cloud-storage-upload",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/oracle-cloud-storage-upload/0.2/oracle-cloud-storage-upload.yaml",
      "kind": "Task",
      "name": "oracle-cloud-storage-upload",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/orka-deploy/0.1/orka-deploy.yaml",
      "kind": "Task",
      "name": "orka-deploy",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-image)",
        "$(params.orka-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-image)",
        "$(params.orka-image)"
      ],
      "script_param_injection": [
        "$(params.script)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.script)"
      ]
    },
    {
      "path": "task/orka-deploy/0.2/orka-deploy.yaml",
      "kind": "Task",
      "name": "orka-deploy",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-tekton-runner-image)",
        "$(params.orka-tekton-runner-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-tekton-runner-image)",
        "$(params.orka-tekton-runner-image)"
      ],
      "script_param_injection": [
        "$(params.script)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.script)"
      ]
    },
    {
      "path": "task/orka-full/0.1/orka-full.yaml",
      "kind": "Task",
      "name": "orka-full",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": false,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-image)",
        "$(params.orka-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-image)",
        "$(params.orka-image)"
      ],
      "script_param_injection": [
        "$(params.script)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.script)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/orka-full/0.2/orka-full.yaml",
      "kind": "Task",
      "name": "orka-full",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-tekton-runner-image)",
        "$(params.orka-tekton-runner-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-tekton-runner-image)",
        "$(params.orka-tekton-runner-image)"
      ],
      "script_param_injection": [
        "$(params.script)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.script)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/orka-init/0.1/orka-init.yaml",
      "kind": "Task",
      "name": "orka-init",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-image)"
      ],
      "script_param_injection": [
        "$(params.orka-token-secret)",
        "$(params.orka-token-secret)",
        "$(params.orka-token-secret-key)",
        "$(params.orka-vm-name-config)",
        "$(params.orka-vm-name-config)",
        "$(params.orka-vm-name-config-key)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-token-secret-key), $(params.orka-vm-name-config), $(params.orka-vm-name-config-key)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/orka-init/0.2/orka-init.yaml",
      "kind": "Task",
      "name": "orka-init",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-tekton-runner-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-tekton-runner-image)"
      ],
      "script_param_injection": [
        "$(params.orka-token-secret)",
        "$(params.orka-token-secret)",
        "$(params.orka-token-secret-key)",
        "$(params.orka-vm-name-config)",
        "$(params.orka-vm-name-config)",
        "$(params.orka-vm-name-config-key)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-token-secret-key), $(params.orka-vm-name-config), $(params.orka-vm-name-config-key)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/orka-teardown/0.1/orka-teardown.yaml",
      "kind": "Task",
      "name": "orka-teardown",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-image)"
      ],
      "script_param_injection": [
        "$(params.orka-token-secret)",
        "$(params.orka-vm-name-config)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-vm-name-config)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/orka-teardown/0.2/orka-teardown.yaml",
      "kind": "Task",
      "name": "orka-teardown",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.orka-tekton-runner-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.orka-tekton-runner-image)"
      ],
      "script_param_injection": [
        "$(params.orka-token-secret)",
        "$(params.orka-vm-name-config)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-vm-name-config)",
        "privileged securityContext"
      ]
    },
    {
      "path": "task/pluto/0.1/pluto.yaml",
      "kind": "Task",
      "name": "pluto",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/powershell/0.1/powershell.yaml",
      "kind": "Task",
      "name": "powershell",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "mcr.microsoft.com/powershell:$(params.tag)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "mcr.microsoft.com/powershell:$(params.tag)"
      ],
      "script_param_injection": [
        "$(params.verbose)",
        "$(params.command)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.command), $(params.verbose)"
      ]
    },
    {
      "path": "task/prettier/0.1/prettier.yaml",
      "kind": "Task",
      "name": "prettier",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.prettierImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.prettierImage)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/prometheus-gate/0.1/prometheus-gate.yaml",
      "kind": "Task",
      "name": "prometheus-gate",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/iancoffey/prometheus-gate-cf7c3e662ede0a4e9bc24d37d2af86d6@sha256:c3df9d8400aef7acb76f409d1e347c5ecaa6f28a69df50981c14bfe87add85d7"
      ],
      "images_pinned": [
        "docker.io/iancoffey/prometheus-gate-cf7c3e662ede0a4e9bc24d37d2af86d6@sha256:c3df9d8400aef7acb76f409d1e347c5ecaa6f28a69df50981c14bfe87add85d7"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/pull-request/0.1/pull-request.yaml",
      "kind": "Task",
      "name": "pull-request",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/pull-request/0.2/pull-request.yaml",
      "kind": "Task",
      "name": "pull-request",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": []
    },
    {
      "path": "task/pylint/0.1/pylint.yaml",
      "kind": "Task",
      "name": "pylint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/python:$(inputs.params.PYTHON)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "docker.io/python:$(inputs.params.PYTHON)"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/pylint/0.2/pylint.yaml",
      "kind": "Task",
      "name": "pylint",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.path)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.path), $(params.requirements_file)"
      ]
    },
    {
      "path": "task/pylint/0.3/pylint.yaml",
      "kind": "Task",
      "name": "pylint",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.requirements_file)",
        "$(params.path)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.path), $(params.requirements_file)"
      ]
    },
    {
      "path": "task/pytest/0.1/pytest.yaml",
      "kind": "Task",
      "name": "pytest",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/python:$(inputs.params.PYTHON)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "docker.io/python:$(inputs.params.PYTHON)"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/pytest/0.2/pytest.yaml",
      "kind": "Task",
      "name": "pytest",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.PYTHON_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.PYTHON_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SOURCE_PATH)",
        "$(params.REQUIREMENTS_FILE)",
        "$(params.SOURCE_PATH)",
        "$(params.REQUIREMENTS_FILE)",
        "$(params.REQUIREMENTS_FILE)",
        "$(params.REQUIREMENTS_FILE)",
        "$(params.ARGS)",
        "$(params.SOURCE_PATH)",
        "$(params.ARGS)",
        "$(params.SOURCE_PATH)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.ARGS), $(params.REQUIREMENTS_FILE), $(params.SOURCE_PATH)"
      ]
    },
    {
      "path": "task/python-boto3-aws/0.1/python-boto3-aws.yaml",
      "kind": "Task",
      "name": "python-boto3",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/library/python:3.9.19-alpine3.20@sha256:45cc18540209d878c2b24080cf8f64fc37603721b67d0ecc508799e2f9a9b21d"
      ],
      "images_pinned": [
        "docker.io/library/python:3.9.19-alpine3.20@sha256:45cc18540209d878c2b24080cf8f64fc37603721b67d0ecc508799e2f9a9b21d"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "missing spec.description",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/python-coverage/0.1/python-coverage.yaml",
      "kind": "Task",
      "name": "python-coverage",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "docker.io/python:$(inputs.params.PYTHON)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "docker.io/python:$(inputs.params.PYTHON)"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/python-sdk-azure/0.1/python-sdk-azure.yaml",
      "kind": "Task",
      "name": "python-azure-sdk",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/library/python:$(params.image-tag)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/library/python:$(params.image-tag)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "missing spec.description",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/redhat-codeready-dependency-analysis/0.1/redhat-codeready-dependency-analysis.yaml",
      "kind": "Task",
      "name": "redhat-codeready-dependency-analysis",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.manifest-file-path)",
        "$(params.output-file-path)",
        "$(params.pkg-installation-directory-path)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.pkg-installation-directory-path)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/redhat-dependency-analytics/0.1/redhat-dependency-analytics.yaml",
      "kind": "Task",
      "name": "redhat-dependency-analytics",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.project-directory-path)",
        "$(params.manifest-file-path)",
        "$(params.output-file-path)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.project-directory-path)"
      ]
    },
    {
      "path": "task/redhat-dependency-analytics/0.2/redhat-dependency-analytics.yaml",
      "kind": "Task",
      "name": "redhat-dependency-analytics",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.python-image)",
        "$(params.rhda-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.python-image)",
        "$(params.rhda-image)"
      ],
      "script_param_injection": [
        "$(params.manifest-file-path)",
        "$(params.output-file-path)",
        "$(params.use-go-mvs-logic)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.use-go-mvs-logic)"
      ]
    },
    {
      "path": "task/redhat-dependency-analytics/0.3/redhat-dependency-analytics.yaml",
      "kind": "Task",
      "name": "redhat-dependency-analytics",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.python-image)",
        "$(params.trustify-cli-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.python-image)",
        "$(params.trustify-cli-image)"
      ],
      "script_param_injection": [
        "$(params.manifest-file-path)",
        "$(params.output-file-path)",
        "$(params.trustify-da-endpoint)",
        "$(params.use-go-mvs-logic)",
        "$(params.trustify-da-endpoint)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.trustify-da-endpoint), $(params.use-go-mvs-logic)"
      ]
    },
    {
      "path": "task/remote-scp/0.1/remote-scp.yaml",
      "kind": "Task",
      "name": "remote-scp",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/appleboy/drone-scp:1.6.14@sha256:0e0597678b948b0aa09888c66ac75af904cce81baf6af955208527d259c61818"
      ],
      "images_pinned": [
        "docker.io/appleboy/drone-scp:1.6.14@sha256:0e0597678b948b0aa09888c66ac75af904cce81baf6af955208527d259c61818"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.HOST)",
        "$(params.PORT)",
        "$(params.USERNAME)",
        "$(params.TO_PATH)",
        "$(params.LOCAL_PATH)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.HOST), $(params.LOCAL_PATH), $(params.PORT), $(params.TO_PATH), $(params.USERNAME)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/remote-ssh-commands/0.1/remote-ssh-commands.yaml",
      "kind": "Task",
      "name": "remote-ssh-commands",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SSH_SCRIPT)",
        "$(params.USE_INSECURE_CIPHER)",
        "$(params.HOST)",
        "$(params.PORT)",
        "$(params.USERNAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.HOST), $(params.PORT), $(params.SSH_SCRIPT), $(params.USERNAME), $(params.USE_INSECURE_CIPHER)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/replace-tokens/0.1/replace-tokens.yaml",
      "kind": "Task",
      "name": "replace-tokens",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/rhacs-deployment-check/3.71/rhacs-deployment-check.yaml",
      "kind": "Task",
      "name": "rhacs-deployment-check",
      "version": "3.71",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/rhacs-deployment-check/4.0/rhacs-deployment-check.yaml",
      "kind": "Task",
      "name": "rhacs-deployment-check",
      "version": "4.0",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/rhacs-generic/0.1/rhacs-generic.yaml",
      "kind": "Task",
      "name": "rhacs-generic",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)",
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)",
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/rhacs-image-check/3.71/rhacs-image-check.yaml",
      "kind": "Task",
      "name": "rhacs-image-check",
      "version": "3.71",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/rhacs-image-check/4.0/rhacs-image-check.yaml",
      "kind": "Task",
      "name": "rhacs-image-check",
      "version": "4.0",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/rhacs-image-scan/3.71/rhacs-image-scan.yaml",
      "kind": "Task",
      "name": "rhacs-image-scan",
      "version": "3.71",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/rhacs-image-scan/4.0/rhacs-image-scan.yaml",
      "kind": "Task",
      "name": "rhacs-image-scan",
      "version": "4.0",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/rhacs-m2m-authenticate/0.1/rhacs-m2m-authenticate.yaml",
      "kind": "Task",
      "name": "rhacs-m2m-authenticate",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.rox_image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.rox_image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/robot-framework/0.1/robot-framework.yaml",
      "kind": "Task",
      "name": "robot-framework",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.IMAGE)"
      ],
      "script_param_injection": [
        "$(params.VARIABLES_FILE)",
        "$(params.ROBOT_OPTIONS)",
        "$(params.TEST_DIR)",
        "$(params.VARIABLES_FILE)",
        "$(params.ROBOT_OPTIONS)",
        "$(params.TEST_DIR)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.ROBOT_OPTIONS), $(params.TEST_DIR), $(params.VARIABLES_FILE)"
      ]
    },
    {
      "path": "task/rsync/0.1/rsync.yaml",
      "kind": "Task",
      "name": "rsync",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/shaowenchen/rsync-sshpass:v1@sha256:934985f9a955f416c7378e22d847ac1320fcae1495ee70ad53c9f9fc08b99323"
      ],
      "images_pinned": [
        "docker.io/shaowenchen/rsync-sshpass:v1@sha256:934985f9a955f416c7378e22d847ac1320fcae1495ee70ad53c9f9fc08b99323"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.direction)",
        "$(params.remote-username)",
        "$(params.remote-ip)",
        "$(params.remote-path)",
        "$(params.local-path)",
        "$(params.local-path)",
        "$(params.remote-username)",
        "$(params.remote-ip)",
        "$(params.remote-path)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.direction), $(params.local-path), $(params.remote-ip), $(params.remote-path), $(params.remote-username)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/ruby-lint/0.1/ruby-lint.yaml",
      "kind": "Task",
      "name": "ruby-lint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/s2i/0.1/s2i.yaml",
      "kind": "Task",
      "name": "s2i",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": true,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "quay.io/openshift-pipeline/s2i:nightly",
        "quay.io/buildah/stable:v1.17.0",
        "quay.io/buildah/stable:v1.17.0"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/openshift-pipeline/s2i:nightly",
        "quay.io/buildah/stable:v1.17.0",
        "quay.io/buildah/stable:v1.17.0"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "uses PipelineResources (spec.resources) \u2014 not representable in v1",
        "privileged securityContext",
        "mutable-tag image(s) (not digest-pinned): 3"
      ]
    },
    {
      "path": "task/s2i/0.2/s2i.yaml",
      "kind": "Task",
      "name": "s2i",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "quay.io/openshift-pipeline/s2i:nightly",
        "quay.io/buildah/stable:v1.17.0",
        "quay.io/buildah/stable:v1.17.0",
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/openshift-pipeline/s2i:nightly",
        "quay.io/buildah/stable:v1.17.0",
        "quay.io/buildah/stable:v1.17.0"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.TLSVERIFY)",
        "$(params.IMAGE_NAME)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE_NAME)",
        "$(params.IMAGE_NAME)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.IMAGE_NAME), $(params.TLSVERIFY)",
        "privileged securityContext",
        "mutable-tag image(s) (not digest-pinned): 3"
      ]
    },
    {
      "path": "task/s2i/0.3/s2i.yaml",
      "kind": "Task",
      "name": "s2i",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "quay.io/openshift-pipeline/s2i:nightly",
        "quay.io/buildah/stable:v1.17.0"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/openshift-pipeline/s2i:nightly",
        "quay.io/buildah/stable:v1.17.0"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.TLSVERIFY)",
        "$(params.IMAGE)",
        "$(params.IMAGE)"
      ],
      "has_security_context": true,
      "privileged": true,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.IMAGE), $(params.TLSVERIFY)",
        "privileged securityContext",
        "mutable-tag image(s) (not digest-pinned): 2"
      ]
    },
    {
      "path": "task/scorecard/0.1/scorecard.yaml",
      "kind": "Task",
      "name": "scorecard",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/send-to-channel-slack/0.1/send-to-channel-slack.yaml",
      "kind": "Task",
      "name": "send-to-channel-slack",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.channel)",
        "$(params.message)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.channel), $(params.message)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/send-to-microsoft-teams/0.1/send-to-microsoft-teams.yaml",
      "kind": "Task",
      "name": "send-to-microsoft-teams",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/send-to-telegram/0.1/send-to-telegram.yaml",
      "kind": "Task",
      "name": "send-to-telegram",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/send-to-webex-room/0.1/send-to-webex-room.yaml",
      "kind": "Task",
      "name": "send-to-webex-room",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.room-id)",
        "$(params.message)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.message), $(params.room-id)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/send-to-webhook-discord/0.1/send-to-webhook-discord.yaml",
      "kind": "Task",
      "name": "send-to-webhook-discord",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/send-to-webhook-slack/0.1/send-to-webhook-slack.yaml",
      "kind": "Task",
      "name": "send-to-webhook-slack",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/sendmail/0.1/sendmail.yaml",
      "kind": "Task",
      "name": "sendmail",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.sender)",
        "$(params.recipients)",
        "$(params.subject)",
        "$(params.body)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.body), $(params.recipients), $(params.sender), $(params.subject)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/sendmail/0.2/sendmail.yaml",
      "kind": "Task",
      "name": "sendmail",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.sender)",
        "$(params.recipients)",
        "$(params.subject)",
        "$(params.body)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.body), $(params.recipients), $(params.sender), $(params.subject)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/shellcheck/0.1/shellcheck.yaml",
      "kind": "Task",
      "name": "shellcheck",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/shp/0.1/shp.yaml",
      "kind": "Task",
      "name": "shp",
      "version": "0.1",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.SHP_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.SHP_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.SCRIPT)"
      ]
    },
    {
      "path": "task/skopeo-copy/0.1/skopeo-copy.yaml",
      "kind": "Task",
      "name": "skopeo-copy",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.srcImageURL), $(params.srcTLSverify)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/skopeo-copy/0.2/skopeo-copy.yaml",
      "kind": "Task",
      "name": "skopeo-copy",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.srcImageURL), $(params.srcTLSverify)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/skopeo-copy/0.3/skopeo-copy.yaml",
      "kind": "Task",
      "name": "skopeo-copy",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.srcImageURL), $(params.srcTLSverify)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/skopeo-copy/0.4/skopeo-copy.yaml",
      "kind": "Task",
      "name": "skopeo-copy",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_pinned": [],
      "images_mutable": [
        "quay.io/skopeo/stable:v1"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.multiArch)",
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)",
        "$(params.multiArch)",
        "$(params.multiArch)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.multiArch)",
        "$(params.srcImageURL)",
        "$(params.destImageURL)",
        "$(params.srcTLSverify)",
        "$(params.destTLSverify)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.multiArch), $(params.srcImageURL), $(params.srcTLSverify)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/sonarqube-scanner/0.1/sonarqube-scanner.yaml",
      "kind": "Task",
      "name": "sonarqube-scanner",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SONAR_HOST_URL)",
        "$(params.SONAR_HOST_URL)",
        "$(params.SONAR_PROJECT_KEY)",
        "$(params.SONAR_PROJECT_KEY)",
        "$(params.SONAR_PROJECT_KEY)",
        "$(params.SONAR_HOST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SONAR_HOST_URL), $(params.SONAR_PROJECT_KEY)",
        "mutable-tag image(s) (not digest-pinned): 1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/sonarqube-scanner/0.2/sonarqube-scanner.yaml",
      "kind": "Task",
      "name": "sonarqube-scanner",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.SONAR_HOST_URL)",
        "$(params.SONAR_HOST_URL)",
        "$(params.SONAR_PROJECT_KEY)",
        "$(params.SONAR_PROJECT_KEY)",
        "$(params.SONAR_PROJECT_KEY)",
        "$(params.SONAR_HOST_URL)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SONAR_HOST_URL), $(params.SONAR_PROJECT_KEY)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/sonarqube-scanner/0.3/sonarqube-scanner.yaml",
      "kind": "Task",
      "name": "sonarqube-scanner",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "$(params.SONAR_SCANNER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.SONAR_SCANNER_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/sonarqube-scanner/0.4/sonarqube-scanner.yaml",
      "kind": "Task",
      "name": "sonarqube-scanner",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
        "$(params.SONAR_SCANNER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi-minimal:8.2"
      ],
      "images_latest": [],
      "images_param": [
        "$(params.SONAR_SCANNER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SONAR_PASSWORD_KEY)",
        "$(params.SONAR_PASSWORD_KEY)",
        "$(params.SONAR_LOGIN_KEY)",
        "$(params.SONAR_LOGIN_KEY)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SONAR_LOGIN_KEY), $(params.SONAR_PASSWORD_KEY)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/stackrox-image-check/0.1/stackrox-image-check.yaml",
      "kind": "Task",
      "name": "stackrox-image-check",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc"
      ],
      "images_pinned": [
        "docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.insecure-skip-tls-verify)",
        "$(params.image)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.image), $(params.insecure-skip-tls-verify)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/stackrox-image-scan/0.1/stackrox-image-scan.yaml",
      "kind": "Task",
      "name": "stackrox-image-scan",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc"
      ],
      "images_pinned": [
        "docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.insecure-skip-tls-verify)",
        "$(params.image)",
        "$(params.output_format)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.image), $(params.insecure-skip-tls-verify), $(params.output_format)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/syft/0.1/syft.yaml",
      "kind": "Task",
      "name": "syft",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.SYFT_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.SYFT_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/tekton-catalog-publish/0.1/tekton-catalog-publish.yaml",
      "kind": "Task",
      "name": "tekton-catalog-publish",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/tekton-catalog-publish/0.2/tekton-catalog-publish.yaml",
      "kind": "Task",
      "name": "tekton-catalog-publish",
      "version": "0.2",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": []
    },
    {
      "path": "task/tekton-operator-install/0.1/tekton-operator-install.yaml",
      "kind": "Task",
      "name": "tekton-operator-install",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": false,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09",
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09"
      ],
      "images_pinned": [
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09",
        "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.OPERATOR_VERSION)",
        "$(params.OPERATOR_VERSION)",
        "$(params.INSTALL_TRIGGERS)",
        "$(params.INSTALL_DASHBOARD)",
        "$(params.INSTALL_EXTENSION_WEBHOOKS)",
        "$(params.INSTALL_TRIGGERS)",
        "$(params.INSTALL_DASHBOARD)",
        "$(params.INSTALL_EXTENSION_WEBHOOKS)",
        "$(params.INSTALL_TRIGGERS)",
        "$(params.INSTALL_DASHBOARD)",
        "$(params.INSTALL_EXTENSION_WEBHOOKS)",
        "$(params.INSTALL_TRIGGERS)",
        "$(params.INSTALL_DASHBOARD)",
        "$(params.INSTALL_EXTENSION_WEBHOOKS)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.INSTALL_DASHBOARD), $(params.INSTALL_EXTENSION_WEBHOOKS), $(params.INSTALL_TRIGGERS), $(params.OPERATOR_VERSION)",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/terraform-cli/0.1/terraform-cli.yaml",
      "kind": "Task",
      "name": "terraform-cli",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/terraform-cli/0.2/terraform-cli.yaml",
      "kind": "Task",
      "name": "terraform-cli",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": true,
      "images": [
        "$(params.image)",
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)",
        "$(params.image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/tkn/0.1/tkn.yaml",
      "kind": "Task",
      "name": "tkn",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [
        "$(params.tkn-image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.tkn-image)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/tkn/0.2/tkn.yaml",
      "kind": "Task",
      "name": "tkn",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)"
      ]
    },
    {
      "path": "task/tkn/0.3/tkn.yaml",
      "kind": "Task",
      "name": "tkn",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)"
      ]
    },
    {
      "path": "task/tkn/0.4/tkn.yaml",
      "kind": "Task",
      "name": "tkn",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT)"
      ]
    },
    {
      "path": "task/tkn/0.5/tkn.yaml",
      "kind": "Task",
      "name": "tkn",
      "version": "0.5",
      "api_version": "tekton.dev/v1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)"
      ],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "$(params) used inside script (injection risk): $(params.SCRIPT)"
      ]
    },
    {
      "path": "task/trigger-jenkins-job/0.1/trigger-jenkins-job.yaml",
      "kind": "Task",
      "name": "trigger-jenkins-job",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": false,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_pinned": [],
      "images_mutable": [
        "registry.access.redhat.com/ubi8/ubi:8.2"
      ],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.JENKINS_HOST_URL)",
        "$(params.JOB_NAME)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.JENKINS_HOST_URL), $(params.JOB_NAME)",
        "mutable-tag image(s) (not digest-pinned): 1"
      ]
    },
    {
      "path": "task/trivy-scanner/0.1/trivy-scanner.yaml",
      "kind": "Task",
      "name": "trivy-scanner",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.TRIVY_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TRIVY_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.IMAGE_PATH)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.IMAGE_PATH)"
      ]
    },
    {
      "path": "task/trivy-scanner/0.2/trivy-scanner.yaml",
      "kind": "Task",
      "name": "trivy-scanner",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": true,
      "images": [
        "$(params.TRIVY_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TRIVY_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.AIR_GAPPED_ENABLED)",
        "$(params.IMAGE_PATH)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.AIR_GAPPED_ENABLED), $(params.IMAGE_PATH)"
      ]
    },
    {
      "path": "task/ts-lint/0.1/ts-lint.yaml",
      "kind": "Task",
      "name": "ts-lint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/upload-pypi/0.1/upload-pypi.yaml",
      "kind": "Task",
      "name": "upload-pypi",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "no tests/run.yaml"
      ]
    },
    {
      "path": "task/upload-pypi/0.2/upload-pypi.yaml",
      "kind": "Task",
      "name": "upload-pypi",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.BUILDER_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.BUILDER_IMAGE)"
      ],
      "script_param_injection": [
        "$(params.PREBUILD_SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.PREBUILD_SCRIPT)"
      ]
    },
    {
      "path": "task/valint/0.1/valint.yaml",
      "kind": "Task",
      "name": "valint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "docker.io/scribesecurity/valint:$(params.version)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "docker.io/scribesecurity/valint:$(params.version)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/wget/0.1/wget.yaml",
      "kind": "Task",
      "name": "wget",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.wget-option)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.wget-option)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/write-file/0.1/write-file.yaml",
      "kind": "Task",
      "name": "write-file",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "docker.io/library/alpine:3.12@sha256:36553b10a4947067b9fbb7d532951066293a68eae893beba1d9235f7d11a20ad"
      ],
      "images_pinned": [
        "docker.io/library/alpine:3.12@sha256:36553b10a4947067b9fbb7d532951066293a68eae893beba1d9235f7d11a20ad"
      ],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/yaml-lint/0.1/yaml-lint.yaml",
      "kind": "Task",
      "name": "yaml-lint",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/yq/0.1/yq.yaml",
      "kind": "Task",
      "name": "yq",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1"
      ]
    },
    {
      "path": "task/yq/0.2/yq.yaml",
      "kind": "Task",
      "name": "yq",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [
        "$(params.expression)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.expression)"
      ]
    },
    {
      "path": "task/yq/0.3/yq.yaml",
      "kind": "Task",
      "name": "yq",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.expression)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.expression)"
      ]
    },
    {
      "path": "task/yq/0.4/yq.yaml",
      "kind": "Task",
      "name": "yq",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)",
        "$(params.expression)",
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT), $(params.expression)"
      ]
    },
    {
      "path": "task/yq/0.5/yq.yaml",
      "kind": "Task",
      "name": "yq",
      "version": "0.4",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.image)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.image)"
      ],
      "script_param_injection": [
        "$(params.SCRIPT)",
        "$(params.expression)",
        "$(params.SCRIPT)"
      ],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "$(params) used inside script (injection risk): $(params.SCRIPT), $(params.expression)"
      ]
    },
    {
      "path": "pipeline/build-push-gke-deploy/0.1/build-push-gke-deploy.yaml",
      "kind": "Pipeline",
      "name": "build-push-gke-deploy",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": false,
      "has_tags": true,
      "has_display_name": false,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": false,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "missing tekton.dev/categories"
      ]
    },
    {
      "path": "pipeline/buildpacks/0.1/buildpacks.yaml",
      "kind": "Pipeline",
      "name": "buildpacks",
      "version": "0.1",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": false,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "missing tekton.dev/categories"
      ]
    },
    {
      "path": "pipeline/buildpacks/0.2/buildpacks.yaml",
      "kind": "Pipeline",
      "name": "buildpacks",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": false,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": true,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1",
        "missing tekton.dev/categories"
      ]
    },
    {
      "path": "stepaction/git-clone/0.1/git-clone.yaml",
      "kind": "StepAction",
      "name": "git-clone",
      "version": "0.1",
      "api_version": "tekton.dev/v1alpha1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1alpha1 -> should be tekton.dev/v1beta1",
        "missing spec.description"
      ]
    },
    {
      "path": "stepaction/git-clone/0.2/git-clone.yaml",
      "kind": "StepAction",
      "name": "git-clone",
      "version": "0.2",
      "api_version": "tekton.dev/v1beta1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.gitInitImage)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.gitInitImage)"
      ],
      "script_param_injection": [],
      "has_security_context": true,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "missing spec.description"
      ]
    },
    {
      "path": "stepaction/tekton-catalog-publish/0.1/tekton-catalog-publish.yaml",
      "kind": "StepAction",
      "name": "tekton-catalog-publish",
      "version": "0.1",
      "api_version": "tekton.dev/v1alpha1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1alpha1 -> should be tekton.dev/v1beta1",
        "missing spec.description"
      ]
    },
    {
      "path": "stepaction/tekton-catalog-publish/0.2/tekton-catalog-publish.yaml",
      "kind": "StepAction",
      "name": "tekton-catalog-publish",
      "version": "0.2",
      "api_version": "tekton.dev/v1alpha1",
      "api_current": false,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": true,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "apiVersion tekton.dev/v1alpha1 -> should be tekton.dev/v1beta1",
        "missing spec.description"
      ]
    },
    {
      "path": "stepaction/tekton-catalog-publish/0.3/tekton-catalog-publish.yaml",
      "kind": "StepAction",
      "name": "tekton-catalog-publish",
      "version": "0.3",
      "api_version": "tekton.dev/v1beta1",
      "api_current": true,
      "has_min_version": true,
      "has_categories": true,
      "has_tags": true,
      "has_display_name": true,
      "has_platforms": true,
      "has_description": false,
      "deprecated": false,
      "uses_pipelineresources": false,
      "uses_taskref_bundle": false,
      "has_tests": true,
      "has_owners": false,
      "images": [
        "$(params.TKN_IMAGE)"
      ],
      "images_pinned": [],
      "images_mutable": [],
      "images_latest": [],
      "images_param": [
        "$(params.TKN_IMAGE)"
      ],
      "script_param_injection": [],
      "has_security_context": false,
      "privileged": false,
      "runs_as_root_explicit": false,
      "issues": [
        "missing spec.description"
      ]
    }
  ],
  "image_scans": {
    "cgr.dev/chainguard/git:2.39@sha256:fdaef225e3fd5cf190520553ff765f186a4363390af3f19912897b0b28f87aeb": {
      "image": "cgr.dev/chainguard/git:2.39@sha256:fdaef225e3fd5cf190520553ff765f186a4363390af3f19912897b0b28f87aeb",
      "resolved": "cgr.dev/chainguard/git@sha256:fdaef225e3fd5cf190520553ff765f186a4363390af3f19912897b0b28f87aeb",
      "scanned": true,
      "critical": 11,
      "high": 69,
      "medium": 0,
      "error": null
    },
    "docker.io/42crunch/docker-api-security-audit:v3.4@sha256:a55fca6e063ad74d9f8c1d65f602aab431c80901a801af3cb045e3a4f961eba5": {
      "image": "docker.io/42crunch/docker-api-security-audit:v3.4@sha256:a55fca6e063ad74d9f8c1d65f602aab431c80901a801af3cb045e3a4f961eba5",
      "resolved": "docker.io/42crunch/docker-api-security-audit@sha256:a55fca6e063ad74d9f8c1d65f602aab431c80901a801af3cb045e3a4f961eba5",
      "scanned": true,
      "critical": 1,
      "high": 20,
      "medium": 0,
      "error": null
    },
    "docker.io/42crunch/docker-api-security-audit:v3@sha256:1a62cdf9975531e2bd0b99d985b5e4e0b89fe1fe5c02f60ecb2e4c708807aa37": {
      "image": "docker.io/42crunch/docker-api-security-audit:v3@sha256:1a62cdf9975531e2bd0b99d985b5e4e0b89fe1fe5c02f60ecb2e4c708807aa37",
      "resolved": "docker.io/42crunch/docker-api-security-audit@sha256:1a62cdf9975531e2bd0b99d985b5e4e0b89fe1fe5c02f60ecb2e4c708807aa37",
      "scanned": true,
      "critical": 6,
      "high": 38,
      "medium": 0,
      "error": null
    },
    "docker.io/42crunch/docker-api-security-audit:v4.2@sha256:350df27b2a1b1aac8e3772d8fb13b254569d49c960f31ab58aa3a1e2fbcec3fe": {
      "image": "docker.io/42crunch/docker-api-security-audit:v4.2@sha256:350df27b2a1b1aac8e3772d8fb13b254569d49c960f31ab58aa3a1e2fbcec3fe",
      "resolved": "docker.io/42crunch/docker-api-security-audit@sha256:350df27b2a1b1aac8e3772d8fb13b254569d49c960f31ab58aa3a1e2fbcec3fe",
      "scanned": true,
      "critical": 2,
      "high": 40,
      "medium": 0,
      "error": null
    },
    "docker.io/alpine@sha256:203ee936961c0f491f72ce9d3c3c67d9440cdb1d61b9783cf340baa09308ffc1": {
      "image": "docker.io/alpine@sha256:203ee936961c0f491f72ce9d3c3c67d9440cdb1d61b9783cf340baa09308ffc1",
      "resolved": "docker.io/alpine@sha256:203ee936961c0f491f72ce9d3c3c67d9440cdb1d61b9783cf340baa09308ffc1",
      "scanned": true,
      "critical": 4,
      "high": 32,
      "medium": 0,
      "error": null
    },
    "docker.io/appleboy/drone-scp:1.6.14@sha256:0e0597678b948b0aa09888c66ac75af904cce81baf6af955208527d259c61818": {
      "image": "docker.io/appleboy/drone-scp:1.6.14@sha256:0e0597678b948b0aa09888c66ac75af904cce81baf6af955208527d259c61818",
      "resolved": "docker.io/appleboy/drone-scp@sha256:0e0597678b948b0aa09888c66ac75af904cce81baf6af955208527d259c61818",
      "scanned": true,
      "critical": 3,
      "high": 26,
      "medium": 0,
      "error": null
    },
    "docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc": {
      "image": "docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc",
      "resolved": "docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc",
      "scanned": true,
      "critical": 0,
      "high": 96,
      "medium": 0,
      "error": null
    },
    "docker.io/goreleaser/goreleaser@sha256:1705d73d62a271d9b4684534d9ed3f5fef943e353d22d79693b8d48d730f4db1": {
      "image": "docker.io/goreleaser/goreleaser@sha256:1705d73d62a271d9b4684534d9ed3f5fef943e353d22d79693b8d48d730f4db1",
      "resolved": "docker.io/goreleaser/goreleaser@sha256:1705d73d62a271d9b4684534d9ed3f5fef943e353d22d79693b8d48d730f4db1",
      "scanned": true,
      "critical": 123,
      "high": 1320,
      "medium": 0,
      "error": null
    },
    "docker.io/goreleaser/goreleaser@sha256:8a596892311c6a5ca45f531eeaf415138e3ea04f3f3d7bd11b46ec320e2d593f": {
      "image": "docker.io/goreleaser/goreleaser@sha256:8a596892311c6a5ca45f531eeaf415138e3ea04f3f3d7bd11b46ec320e2d593f",
      "resolved": "docker.io/goreleaser/goreleaser@sha256:8a596892311c6a5ca45f531eeaf415138e3ea04f3f3d7bd11b46ec320e2d593f",
      "scanned": true,
      "critical": 114,
      "high": 1327,
      "medium": 0,
      "error": null
    },
    "docker.io/hugomods/hugo:0.122.0@sha256:e90f2e6786969463f3475c7d5e7f031cb5dbf75a8394687d52f99d6c9d0eda0d": {
      "image": "docker.io/hugomods/hugo:0.122.0@sha256:e90f2e6786969463f3475c7d5e7f031cb5dbf75a8394687d52f99d6c9d0eda0d",
      "resolved": "docker.io/hugomods/hugo@sha256:e90f2e6786969463f3475c7d5e7f031cb5dbf75a8394687d52f99d6c9d0eda0d",
      "scanned": true,
      "critical": 45,
      "high": 376,
      "medium": 0,
      "error": null
    },
    "docker.io/iancoffey/prometheus-gate-cf7c3e662ede0a4e9bc24d37d2af86d6@sha256:c3df9d8400aef7acb76f409d1e347c5ecaa6f28a69df50981c14bfe87add85d7": {
      "image": "docker.io/iancoffey/prometheus-gate-cf7c3e662ede0a4e9bc24d37d2af86d6@sha256:c3df9d8400aef7acb76f409d1e347c5ecaa6f28a69df50981c14bfe87add85d7",
      "resolved": "docker.io/iancoffey/prometheus-gate-cf7c3e662ede0a4e9bc24d37d2af86d6@sha256:c3df9d8400aef7acb76f409d1e347c5ecaa6f28a69df50981c14bfe87add85d7",
      "scanned": true,
      "critical": 5,
      "high": 61,
      "medium": 0,
      "error": null
    },
    "docker.io/iancoffey/sendevent-89c3de01c503ceb66b676a3e41c265ed@sha256:fc39998cba7ad8e54323b948b56b11b0b235996069349fb74776865fedf182a5": {
      "image": "docker.io/iancoffey/sendevent-89c3de01c503ceb66b676a3e41c265ed@sha256:fc39998cba7ad8e54323b948b56b11b0b235996069349fb74776865fedf182a5",
      "resolved": "docker.io/iancoffey/sendevent-89c3de01c503ceb66b676a3e41c265ed@sha256:fc39998cba7ad8e54323b948b56b11b0b235996069349fb74776865fedf182a5",
      "scanned": true,
      "critical": 5,
      "high": 60,
      "medium": 0,
      "error": null
    },
    "docker.io/instrumenta/helm-conftest@sha256:11cb9fd6d101d80af87931db359d4b3ad9a843cf0eb1ea0ab7173424eb379948": {
      "image": "docker.io/instrumenta/helm-conftest@sha256:11cb9fd6d101d80af87931db359d4b3ad9a843cf0eb1ea0ab7173424eb379948",
      "resolved": "docker.io/instrumenta/helm-conftest@sha256:11cb9fd6d101d80af87931db359d4b3ad9a843cf0eb1ea0ab7173424eb379948",
      "scanned": true,
      "critical": 44,
      "high": 277,
      "medium": 0,
      "error": null
    },
    "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09": {
      "image": "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09",
      "resolved": "docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09",
      "scanned": true,
      "critical": 9,
      "high": 91,
      "medium": 0,
      "error": null
    },
    "docker.io/library/alpine:3.12@sha256:36553b10a4947067b9fbb7d532951066293a68eae893beba1d9235f7d11a20ad": {
      "image": "docker.io/library/alpine:3.12@sha256:36553b10a4947067b9fbb7d532951066293a68eae893beba1d9235f7d11a20ad",
      "resolved": "docker.io/library/alpine@sha256:36553b10a4947067b9fbb7d532951066293a68eae893beba1d9235f7d11a20ad",
      "scanned": true,
      "critical": 4,
      "high": 25,
      "medium": 0,
      "error": null
    },
    "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6": {
      "image": "docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
      "resolved": "docker.io/library/bash@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6",
      "scanned": true,
      "critical": 4,
      "high": 34,
      "medium": 0,
      "error": null
    },
    "docker.io/library/bash:5.1.4@sha256:c523c636b722339f41b6a431b44588ab2f762c5de5ec3bd7964420ff982fb1d9": {
      "image": "docker.io/library/bash:5.1.4@sha256:c523c636b722339f41b6a431b44588ab2f762c5de5ec3bd7964420ff982fb1d9",
      "resolved": "docker.io/library/bash@sha256:c523c636b722339f41b6a431b44588ab2f762c5de5ec3bd7964420ff982fb1d9",
      "scanned": true,
      "critical": 4,
      "high": 27,
      "medium": 0,
      "error": null
    },
    "docker.io/library/python:3.12-slim": {
      "image": "docker.io/library/python:3.12-slim",
      "resolved": "docker.io/library/python@sha256:090ba77e2958f6af52a5341f788b50b032dd4ca28377d2893dcf1ecbdfdfe203",
      "scanned": true,
      "critical": 2,
      "high": 7,
      "medium": 0,
      "error": null
    },
    "docker.io/library/python:3.9-alpine3.13@sha256:437482dd314471f5f10967f7376489d9e7f67c111850c123cc725a1741b66aac": {
      "image": "docker.io/library/python:3.9-alpine3.13@sha256:437482dd314471f5f10967f7376489d9e7f67c111850c123cc725a1741b66aac",
      "resolved": "docker.io/library/python@sha256:437482dd314471f5f10967f7376489d9e7f67c111850c123cc725a1741b66aac",
      "scanned": true,
      "critical": 11,
      "high": 52,
      "medium": 0,
      "error": null
    },
    "docker.io/library/python:3.9.19-alpine3.20@sha256:45cc18540209d878c2b24080cf8f64fc37603721b67d0ecc508799e2f9a9b21d": {
      "image": "docker.io/library/python:3.9.19-alpine3.20@sha256:45cc18540209d878c2b24080cf8f64fc37603721b67d0ecc508799e2f9a9b21d",
      "resolved": "docker.io/library/python@sha256:45cc18540209d878c2b24080cf8f64fc37603721b67d0ecc508799e2f9a9b21d",
      "scanned": true,
      "critical": 5,
      "high": 30,
      "medium": 0,
      "error": null
    },
    "docker.io/shaowenchen/rsync-sshpass:v1@sha256:934985f9a955f416c7378e22d847ac1320fcae1495ee70ad53c9f9fc08b99323": {
      "image": "docker.io/shaowenchen/rsync-sshpass:v1@sha256:934985f9a955f416c7378e22d847ac1320fcae1495ee70ad53c9f9fc08b99323",
      "resolved": "docker.io/shaowenchen/rsync-sshpass@sha256:934985f9a955f416c7378e22d847ac1320fcae1495ee70ad53c9f9fc08b99323",
      "scanned": true,
      "critical": 1,
      "high": 43,
      "medium": 0,
      "error": null
    },
    "docker.io/sonatype/nexus-iq-cli:1.136.0-01": {
      "image": "docker.io/sonatype/nexus-iq-cli:1.136.0-01",
      "resolved": "docker.io/sonatype/nexus-iq-cli@sha256:50ed75920a089fb015586132d5cbeebe0e478ab346ada07548c7180623bde1d3",
      "scanned": true,
      "critical": 1,
      "high": 25,
      "medium": 0,
      "error": null
    },
    "docker.io/stackrox/kube-linter:0.2.2-2-g7d10a69154-alpine@sha256:e520e9d8d3a2dfa611914836536545b135845e7bda9f1df34b060e116232dbf0": {
      "image": "docker.io/stackrox/kube-linter:0.2.2-2-g7d10a69154-alpine@sha256:e520e9d8d3a2dfa611914836536545b135845e7bda9f1df34b060e116232dbf0",
      "resolved": "docker.io/stackrox/kube-linter@sha256:e520e9d8d3a2dfa611914836536545b135845e7bda9f1df34b060e116232dbf0",
      "scanned": true,
      "critical": 11,
      "high": 99,
      "medium": 0,
      "error": null
    },
    "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09": {
      "image": "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09",
      "resolved": "docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09",
      "scanned": false,
      "critical": 0,
      "high": 0,
      "medium": 0,
      "error": "\t* remote error: unsupported MediaType: \"application/vnd.docker.distribution.manifest.v1+prettyjws\", see https://github.com/google/go-containerregistry/issues/377"
    },
    "docker.io/weaveworks/eksctl:0.35.0@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327": {
      "image": "docker.io/weaveworks/eksctl:0.35.0@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327",
      "resolved": "docker.io/weaveworks/eksctl@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327",
      "scanned": true,
      "critical": 30,
      "high": 284,
      "medium": 0,
      "error": null
    },
    "docker.io/zricethezav/gitleaks:v7.5.0@sha256:55b2e1831c7395f17e9da3649924736b396b25be69efdc7a0137073fe0b0f456": {
      "image": "docker.io/zricethezav/gitleaks:v7.5.0@sha256:55b2e1831c7395f17e9da3649924736b396b25be69efdc7a0137073fe0b0f456",
      "resolved": "docker.io/zricethezav/gitleaks@sha256:55b2e1831c7395f17e9da3649924736b396b25be69efdc7a0137073fe0b0f456",
      "scanned": true,
      "critical": 11,
      "high": 103,
      "medium": 0,
      "error": null
    },
    "gcr.io/cloud-builders/gke-deploy@sha256:6d18a1efabf8a7ea7f2169c93f3e01fc5b8247b12099618c496ab097aaae341f": {
      "image": "gcr.io/cloud-builders/gke-deploy@sha256:6d18a1efabf8a7ea7f2169c93f3e01fc5b8247b12099618c496ab097aaae341f",
      "resolved": "gcr.io/cloud-builders/gke-deploy@sha256:6d18a1efabf8a7ea7f2169c93f3e01fc5b8247b12099618c496ab097aaae341f",
      "scanned": true,
      "critical": 60,
      "high": 655,
      "medium": 0,
      "error": null
    },
    "gcr.io/cloud-builders/gradle@sha256:797c9936cf33fc30d82a54437541d7ea7f7825c93e3237a89d254b9bc40b0898": {
      "image": "gcr.io/cloud-builders/gradle@sha256:797c9936cf33fc30d82a54437541d7ea7f7825c93e3237a89d254b9bc40b0898",
      "resolved": "gcr.io/cloud-builders/gradle@sha256:797c9936cf33fc30d82a54437541d7ea7f7825c93e3237a89d254b9bc40b0898",
      "scanned": true,
      "critical": 75,
      "high": 852,
      "medium": 0,
      "error": null
    },
    "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105": {
      "image": "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105",
      "resolved": "gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105",
      "scanned": true,
      "critical": 9,
      "high": 88,
      "medium": 0,
      "error": null
    },
    "gcr.io/kythe-public/golang-extractor:git-8697a6c4b15caf12b59d8e32b9ac0ee4aa9306bc@sha256:e56f0afbae2408288828065a40dddb6d864aef12dc84c412f48fd6e664184dc3": {
      "image": "gcr.io/kythe-public/golang-extractor:git-8697a6c4b15caf12b59d8e32b9ac0ee4aa9306bc@sha256:e56f0afbae2408288828065a40dddb6d864aef12dc84c412f48fd6e664184dc3",
      "resolved": null,
      "scanned": false,
      "critical": 0,
      "high": 0,
      "medium": 0,
      "error": "\t* remote error: GET https://gcr.io/v2/kythe-public/golang-extractor/manifests/sha256:e56f0afbae2408288828065a40dddb6d864aef12dc84c412f48fd6e664184dc3: MANIFEST_UNKNOWN: Requested entity was not found"
    },
    "ghcr.io/oracle/oci-cli:sha-5846bb2": {
      "image": "ghcr.io/oracle/oci-cli:sha-5846bb2",
      "resolved": "ghcr.io/oracle/oci-cli@sha256:b9079ea692f0cdb9d74ba0ef73c07615d4a73119b8c3fc6a29ea9b4eb8cf27ef",
      "scanned": true,
      "critical": 0,
      "high": 100,
      "medium": 0,
      "error": null
    },
    "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.14.2": {
      "image": "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.14.2",
      "resolved": "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init@sha256:f7524d37431fa7d301dfa5c6d0bb3c2e2b029172ec2f823f0e0c6ce9d3c2718c",
      "scanned": true,
      "critical": 10,
      "high": 100,
      "medium": 0,
      "error": null
    },
    "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2": {
      "image": "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2",
      "resolved": "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter@sha256:c756458c29ef62cc1d660e6118057f2dae33926eefb6950b6a6a5455cdf35250",
      "scanned": true,
      "critical": 5,
      "high": 60,
      "medium": 0,
      "error": null
    },
    "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.18.0": {
      "image": "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.18.0",
      "resolved": "ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter@sha256:7c1d6ad17468df3367586ea3a084fd0add048e192b4a64215a3c2b9e32581c1c",
      "scanned": true,
      "critical": 5,
      "high": 60,
      "medium": 0,
      "error": null
    },
    "ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454": {
      "image": "ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454",
      "resolved": "ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454",
      "scanned": true,
      "critical": 315,
      "high": 3345,
      "medium": 0,
      "error": null
    },
    "quay.io/buildah/stable:v1.17.0": {
      "image": "quay.io/buildah/stable:v1.17.0",
      "resolved": "quay.io/buildah/stable@sha256:a9ebe075cd3232cd2e0d0c5191f3a26272728583ec3beea296838e7ef5a2e543",
      "scanned": false,
      "critical": 0,
      "high": 0,
      "medium": 0,
      "error": "\t* remote error: unsupported MediaType: \"application/vnd.docker.distribution.manifest.v1+prettyjws\", see https://github.com/google/go-containerregistry/issues/377"
    },
    "quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88": {
      "image": "quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88",
      "resolved": "quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88",
      "scanned": true,
      "critical": 11,
      "high": 61,
      "medium": 0,
      "error": null
    },
    "quay.io/jumpstarter-dev/jumpstarter:latest": {
      "image": "quay.io/jumpstarter-dev/jumpstarter:latest",
      "resolved": "quay.io/jumpstarter-dev/jumpstarter@sha256:769a91aeea1bc41cc6f6a082bf6e4b7271eaf5007e467fa803f62f22e3a60609",
      "scanned": true,
      "critical": 0,
      "high": 0,
      "medium": 0,
      "error": null
    },
    "quay.io/openshift-pipeline/s2i:nightly": {
      "image": "quay.io/openshift-pipeline/s2i:nightly",
      "resolved": "quay.io/openshift-pipeline/s2i@sha256:6c1107bc040ce2b7354c1f101a7e00054bfec754098bd760d846c99dc366662e",
      "scanned": true,
      "critical": 0,
      "high": 89,
      "medium": 0,
      "error": null
    },
    "quay.io/openshift/origin-cli:4.6": {
      "image": "quay.io/openshift/origin-cli:4.6",
      "resolved": "quay.io/openshift/origin-cli@sha256:6722d5041b472ac61a294647f7fa02fb432a948835bb780cc73cd221a9291a2c",
      "scanned": true,
      "critical": 10,
      "high": 87,
      "medium": 0,
      "error": null
    },
    "quay.io/skopeo/stable:v1": {
      "image": "quay.io/skopeo/stable:v1",
      "resolved": "quay.io/skopeo/stable@sha256:c7d3c512612f52805023cd38351081dad7e2729fc13d14b701e47c7c8bdd6615",
      "scanned": true,
      "critical": 0,
      "high": 0,
      "medium": 0,
      "error": null
    },
    "quay.io/vinamra2807/openshift-client-python@sha256:17c6b464c2fa930d09203b75b68dbcf120c46a4e8fe56b60fb4e5d0015798343": {
      "image": "quay.io/vinamra2807/openshift-client-python@sha256:17c6b464c2fa930d09203b75b68dbcf120c46a4e8fe56b60fb4e5d0015798343",
      "resolved": "quay.io/vinamra2807/openshift-client-python@sha256:17c6b464c2fa930d09203b75b68dbcf120c46a4e8fe56b60fb4e5d0015798343",
      "scanned": false,
      "critical": 0,
      "high": 0,
      "medium": 0,
      "error": "2026-06-08T16:26:22+02:00\tFATAL\tFatal error\trun error: image scan error: scan error: scan failed: scan failed: failed to detect vulnerabilities: unable to scan OS packages: failed vulnerability detect"
    },
    "registry.access.redhat.com/ubi8/python-311@sha256:43605cb2491ef2297a7acf4b4bf0b7f54f0c91b96daf12ae41c49cc7f192b153": {
      "image": "registry.access.redhat.com/ubi8/python-311@sha256:43605cb2491ef2297a7acf4b4bf0b7f54f0c91b96daf12ae41c49cc7f192b153",
      "resolved": "registry.access.redhat.com/ubi8/python-311@sha256:43605cb2491ef2297a7acf4b4bf0b7f54f0c91b96daf12ae41c49cc7f192b153",
      "scanned": true,
      "critical": 0,
      "high": 185,
      "medium": 0,
      "error": null
    },
    "registry.access.redhat.com/ubi8/python-38:1-34.1599745032": {
      "image": "registry.access.redhat.com/ubi8/python-38:1-34.1599745032",
      "resolved": "registry.access.redhat.com/ubi8/python-38@sha256:9a6830a753a77b0a2dc140d05bdf56f35c41867fa06c9b30366216e65bc600b3",
      "scanned": true,
      "critical": 0,
      "high": 384,
      "medium": 0,
      "error": null
    },
    "registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef": {
      "image": "registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef",
      "resolved": "registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef",
      "scanned": true,
      "critical": 0,
      "high": 372,
      "medium": 0,
      "error": null
    },
    "registry.access.redhat.com/ubi8/python-39@sha256:27e795fd6b1b77de70d1dc73a65e4c790650748a9cfda138fdbd194b3d6eea3d": {
      "image": "registry.access.redhat.com/ubi8/python-39@sha256:27e795fd6b1b77de70d1dc73a65e4c790650748a9cfda138fdbd194b3d6eea3d",
      "resolved": "registry.access.redhat.com/ubi8/python-39@sha256:27e795fd6b1b77de70d1dc73a65e4c790650748a9cfda138fdbd194b3d6eea3d",
      "scanned": true,
      "critical": 0,
      "high": 283,
      "medium": 0,
      "error": null
    },
    "registry.access.redhat.com/ubi8/ubi-minimal:8.2": {
      "image": "registry.access.redhat.com/ubi8/ubi-minimal:8.2",
      "resolved": "registry.access.redhat.com/ubi8/ubi-minimal@sha256:5cfbaf45ca96806917830c183e9f37df2e913b187aadb32e89fd83fa455ebaa6",
      "scanned": true,
      "critical": 0,
      "high": 72,
      "medium": 0,
      "error": null
    },
    "registry.access.redhat.com/ubi8/ubi-minimal@sha256:b2a1bec3dfbc7a14a1d84d98934dfe8fdde6eb822a211286601cf109cbccb075": {
      "image": "registry.access.redhat.com/ubi8/ubi-minimal@sha256:b2a1bec3dfbc7a14a1d84d98934dfe8fdde6eb822a211286601cf109cbccb075",
      "resolved": "registry.access.redhat.com/ubi8/ubi-minimal@sha256:b2a1bec3dfbc7a14a1d84d98934dfe8fdde6eb822a211286601cf109cbccb075",
      "scanned": true,
      "critical": 0,
      "high": 14,
      "medium": 0,
      "error": null
    },
    "registry.access.redhat.com/ubi8/ubi:8.2": {
      "image": "registry.access.redhat.com/ubi8/ubi:8.2",
      "resolved": "registry.access.redhat.com/ubi8/ubi@sha256:d748c21a55796827da82c61f162b505c59451cba24f1874e5185f21275b6bddc",
      "scanned": true,
      "critical": 0,
      "high": 92,
      "medium": 0,
      "error": null
    },
    "registry.access.redhat.com/ubi8:8.2": {
      "image": "registry.access.redhat.com/ubi8:8.2",
      "resolved": "registry.access.redhat.com/ubi8@sha256:d748c21a55796827da82c61f162b505c59451cba24f1874e5185f21275b6bddc",
      "scanned": true,
      "critical": 0,
      "high": 92,
      "medium": 0,
      "error": null
    }
  }
}

report.md

Tekton Catalog — Health Report

Analyzed 308 primary manifests (task/pipeline/stepaction).

Baseline: tektoncd/catalog@8e41018c7a60 (8e41018c7a601d33f860f714d0b911dc05359af7) · Generated: 2026-06-08 (UTC) Scope: primary manifests only (<kind>/<name>/<version>/<name>.yaml); samples/tests excluded. CVE scan: trivy, severity HIGH+CRITICAL, default image per resource, digest-resolved where possible (50 distinct images; 4 unscannable due to old media types / removed images).

How to read this

• $(params) in script (172) and privileged (27) are review signals, not automatic bugs — many are legitimate or historical. The recommended hardening is to pass parameters via env and drop privileges where feasible.
• API outdated (269) = Task/Pipeline not on v1, StepAction not on v1beta1. (Pipelines + StepActions are addressed in PR #1380.)
• CVE counts reflect currently pinned digests/tags; high counts usually mean the pinned image is old. Re-pinning to current digests is the fix.
• Reproduce: hack/catalog-health.py --root . --cve (trivy via nix run nixpkgs#trivy).

Summary

Metric	Count
API version outdated	269
Uses PipelineResources	11
Uses taskRef.bundle	0
$(params) in script (injection)	172
Privileged securityContext	27
:latest / untagged images	2
Mutable-tag images (not digest)	58
Missing minVersion	3
Missing spec.description	11
Missing tests/run.yaml	113
Deprecated	150

API currency by kind

Kind	Current / Total
Pipeline	0 / 3
StepAction	2 / 5
Task	37 / 300

CVEs (HIGH/CRITICAL): 956 critical, 11553 high across 50 images

Image	Crit	High	Note
ghcr.io/tektoncd/plumbing/test-runner@sha256:44aa00796831a4ed5586152058dd96a6d14174b8a4ea9fcae663fb37f72c9454	315	3345
docker.io/goreleaser/goreleaser@sha256:1705d73d62a271d9b4684534d9ed3f5fef943e353d22d79693b8d48d730f4db1	123	1320
docker.io/goreleaser/goreleaser@sha256:8a596892311c6a5ca45f531eeaf415138e3ea04f3f3d7bd11b46ec320e2d593f	114	1327
gcr.io/cloud-builders/gradle@sha256:797c9936cf33fc30d82a54437541d7ea7f7825c93e3237a89d254b9bc40b0898	75	852
gcr.io/cloud-builders/gke-deploy@sha256:6d18a1efabf8a7ea7f2169c93f3e01fc5b8247b12099618c496ab097aaae341f	60	655
docker.io/hugomods/hugo:0.122.0@sha256:e90f2e6786969463f3475c7d5e7f031cb5dbf75a8394687d52f99d6c9d0eda0d	45	376
docker.io/instrumenta/helm-conftest@sha256:11cb9fd6d101d80af87931db359d4b3ad9a843cf0eb1ea0ab7173424eb379948	44	277
docker.io/weaveworks/eksctl:0.35.0@sha256:48c1fa508970a01fd87a73ac7932a7160479d678cd019a3c84533d911fc54327	30	284
docker.io/zricethezav/gitleaks:v7.5.0@sha256:55b2e1831c7395f17e9da3649924736b396b25be69efdc7a0137073fe0b0f456	11	103
docker.io/stackrox/kube-linter:0.2.2-2-g7d10a69154-alpine@sha256:e520e9d8d3a2dfa611914836536545b135845e7bda9f1df34b060e116232dbf0	11	99
cgr.dev/chainguard/git:2.39@sha256:fdaef225e3fd5cf190520553ff765f186a4363390af3f19912897b0b28f87aeb	11	69
quay.io/chmouel/github-app-token@sha256:bc45937ae588df876555ebb56c36350ed74592c7f55f2df255cabef39c926a88	11	61
docker.io/library/python:3.9-alpine3.13@sha256:437482dd314471f5f10967f7376489d9e7f67c111850c123cc725a1741b66aac	11	52
ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.14.2	10	100
quay.io/openshift/origin-cli:4.6	10	87
docker.io/lachlanevenson/k8s-kubectl@sha256:3a5e22a406a109f4f26ec06b5f1f6a66ae0cd0e185bc28499eb7b7a3bbf1fe09	9	91
gcr.io/k8s-staging-boskos/boskosctl@sha256:a7fc984732c5dd0b4e0fe0a92e2730fa4b6bddecd0f6f6c7c6b5501abe4ab105	9	88
docker.io/42crunch/docker-api-security-audit:v3@sha256:1a62cdf9975531e2bd0b99d985b5e4e0b89fe1fe5c02f60ecb2e4c708807aa37	6	38
docker.io/iancoffey/prometheus-gate-cf7c3e662ede0a4e9bc24d37d2af86d6@sha256:c3df9d8400aef7acb76f409d1e347c5ecaa6f28a69df50981c14bfe87add85d7	5	61
docker.io/iancoffey/sendevent-89c3de01c503ceb66b676a3e41c265ed@sha256:fc39998cba7ad8e54323b948b56b11b0b235996069349fb74776865fedf182a5	5	60
ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.16.2	5	60
ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/imagedigestexporter:v0.18.0	5	60
docker.io/library/python:3.9.19-alpine3.20@sha256:45cc18540209d878c2b24080cf8f64fc37603721b67d0ecc508799e2f9a9b21d	5	30
docker.io/library/bash:5.1.4@sha256:b208215a4655538be652b2769d82e576bc4d0a2bb132144c060efc5be8c3f5d6	4	34
docker.io/alpine@sha256:203ee936961c0f491f72ce9d3c3c67d9440cdb1d61b9783cf340baa09308ffc1	4	32
docker.io/library/bash:5.1.4@sha256:c523c636b722339f41b6a431b44588ab2f762c5de5ec3bd7964420ff982fb1d9	4	27
docker.io/library/alpine:3.12@sha256:36553b10a4947067b9fbb7d532951066293a68eae893beba1d9235f7d11a20ad	4	25
registry.access.redhat.com/ubi8/python-38:1-34.1599745032	0	384
registry.access.redhat.com/ubi8/python-38@sha256:af6f93b81f9313de95966e8cd681edb9dbcb5fdbddc5a4cc365af8e4534096ef	0	372
docker.io/appleboy/drone-scp:1.6.14@sha256:0e0597678b948b0aa09888c66ac75af904cce81baf6af955208527d259c61818	3	26
registry.access.redhat.com/ubi8/python-39@sha256:27e795fd6b1b77de70d1dc73a65e4c790650748a9cfda138fdbd194b3d6eea3d	0	283
docker.io/42crunch/docker-api-security-audit:v4.2@sha256:350df27b2a1b1aac8e3772d8fb13b254569d49c960f31ab58aa3a1e2fbcec3fe	2	40
docker.io/library/python:3.12-slim	2	7
registry.access.redhat.com/ubi8/python-311@sha256:43605cb2491ef2297a7acf4b4bf0b7f54f0c91b96daf12ae41c49cc7f192b153	0	185
docker.io/shaowenchen/rsync-sshpass:v1@sha256:934985f9a955f416c7378e22d847ac1320fcae1495ee70ad53c9f9fc08b99323	1	43
docker.io/sonatype/nexus-iq-cli:1.136.0-01	1	25
docker.io/42crunch/docker-api-security-audit:v3.4@sha256:a55fca6e063ad74d9f8c1d65f602aab431c80901a801af3cb045e3a4f961eba5	1	20
ghcr.io/oracle/oci-cli:sha-5846bb2	0	100
docker.io/centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc	0	96
registry.access.redhat.com/ubi8/ubi:8.2	0	92
registry.access.redhat.com/ubi8:8.2	0	92
quay.io/openshift-pipeline/s2i:nightly	0	89
registry.access.redhat.com/ubi8/ubi-minimal:8.2	0	72
registry.access.redhat.com/ubi8/ubi-minimal@sha256:b2a1bec3dfbc7a14a1d84d98934dfe8fdde6eb822a211286601cf109cbccb075	0	14
docker.io/stedolan/jq@sha256:a61ed0bca213081b64be94c5e1b402ea58bc549f457c2682a86704dd55231e09	0	0	* remote error: unsupported MediaType: "application/vnd.docker.distribution.manifest.v1+prettyjws", see google/go-containerregistry#377
gcr.io/kythe-public/golang-extractor:git-8697a6c4b15caf12b59d8e32b9ac0ee4aa9306bc@sha256:e56f0afbae2408288828065a40dddb6d864aef12dc84c412f48fd6e664184dc3	0	0	* remote error: GET https://gcr.io/v2/kythe-public/golang-extractor/manifests/sha256:e56f0afbae2408288828065a40dddb6d864aef12dc84c412f48fd6e664184dc3: MANIFEST_UNKNOWN: Requested entity was not found
quay.io/buildah/stable:v1.17.0	0	0	* remote error: unsupported MediaType: "application/vnd.docker.distribution.manifest.v1+prettyjws", see google/go-containerregistry#377
quay.io/vinamra2807/openshift-client-python@sha256:17c6b464c2fa930d09203b75b68dbcf120c46a4e8fe56b60fb4e5d0015798343	0	0	2026-06-08T16:26:22+02:00 FATAL Fatal error run error: image scan error: scan error: scan failed: scan failed: failed to detect vulnerabilities: unable to scan OS packages: failed vulnerability detect

Findings per resource

Task (293 with findings)

• task/42crunch-api-security-audit/0.1/42crunch-api-security-audit.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/42crunch-api-security-audit/0.2/42crunch-api-security-audit.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/42crunch-api-security-audit/0.3/42crunch-api-security-audit.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/ai-code-review/0.1/ai-code-review.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 2; no tests/run.yaml
• task/anchore-cli/0.1/anchore-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.ANCHORE_CLI_URL), $(params.IMAGE_NAME); no tests/run.yaml
• task/ansible-builder/0.1/ansible-builder.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_CONTEXT), $(params.FILENAME), $(params.OUTPUT_FILENAME), $(params.VERBOSITY)
• task/ansible-runner/0.1/ansible-runner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/ansible-runner/0.2/ansible-runner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/ansible-tower-cli/0.1/ansible-tower-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/argocd-task-connect-repo/0.1/argocd-task-connect-repo.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags), $(params.repository-name), $(params.repository-type), $(params.repository-url); no tests/run.yaml
• task/argocd-task-sync-and-wait/0.1/argocd-task-sync-and-wait.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.application-name), $(params.flags), $(params.revision); no tests/run.yaml
• task/argocd-task-sync-and-wait/0.2/argocd-task-sync-and-wait.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.application-name), $(params.flags), $(params.revision); no tests/run.yaml
• task/asciidoctor/0.1/asciidoctor.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/aws-cli/0.1/aws-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT); no tests/run.yaml
• task/aws-cli/0.2/aws-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT); no tests/run.yaml
• task/aws-ecr-login/0.1/aws-ecr-login.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.region); no tests/run.yaml
• task/az/0.1/az.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/bentoml/0.1/bentoml.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/black/0.1/black.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/black/0.2/black.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.requirements_file)
• task/blue-green-deploy/0.1/blue-green-deploy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.MANIFEST), $(params.NEW_VERSION), $(params.SERVICE_NAME); mutable-tag image(s) (not digest-pinned): 1
• task/blue-green-deploy/0.2/blue-green-deploy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.MANIFEST), $(params.NAMESPACE), $(params.NEW_VERSION), $(params.SERVICE_NAME)
• task/boskos-acquire/0.1/boskos-acquire.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.owner-name), $(params.server-url), $(params.type); no tests/run.yaml
• task/boskos-release/0.1/boskos-release.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/buildah-manifest-create/0.1/buildah-manifest-create.yaml — privileged securityContext; no tests/run.yaml
• task/buildah-manifest-push/0.1/buildah-manifest-push.yaml — privileged securityContext; no tests/run.yaml
• task/buildah/0.1/buildah.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE); privileged securityContext
• task/buildah/0.2/buildah.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE); privileged securityContext
• task/buildah/0.3/buildah.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE); privileged securityContext
• task/buildah/0.4/buildah.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE); privileged securityContext
• task/buildah/0.5/buildah.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE); privileged securityContext
• task/buildah/0.6/buildah.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE); privileged securityContext
• task/buildah/0.7/buildah.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BUILD_EXTRA_ARGS), $(params.CONTEXT), $(params.DOCKERFILE), $(params.FORMAT), $(params.IMAGE); privileged securityContext
• task/buildah/0.8/buildah.yaml — privileged securityContext
• task/buildah/0.9/buildah.yaml — privileged securityContext
• task/buildkit-daemonless/0.1/buildkit-daemonless.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; privileged securityContext; no tests/run.yaml
• task/buildkit/0.1/buildkit.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; no tests/run.yaml
• task/buildpacks-phases/0.1/buildpacks-phases.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; privileged securityContext
• task/buildpacks-phases/0.2/buildpacks-phases.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GROUP_ID), $(params.USER_ID); privileged securityContext
• task/buildpacks-phases/0.3/buildpacks-phases.yaml — $(params) used inside script (injection risk): $(params.CNB_PLATFORM_DIR), $(params.SOURCE_SUBPATH)
• task/buildpacks/0.1/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; privileged securityContext
• task/buildpacks/0.2/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1
• task/buildpacks/0.3/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GROUP_ID), $(params.USER_ID); privileged securityContext
• task/buildpacks/0.4/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GROUP_ID), $(params.USER_ID)
• task/buildpacks/0.5/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.APP_IMAGE), $(params.GROUP_ID), $(params.USER_ID)
• task/buildpacks/0.6/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.APP_IMAGE), $(params.GROUP_ID), $(params.USER_ID)
• task/check-make/0.1/check-make.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/cloudevent/0.1/cloudevent.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/codecov/0.1/codecov.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/conftest/0.1/conftest.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/conftest/0.2/conftest.yaml — no tests/run.yaml
• task/create-github-release/0.1/create-github-release.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.RELEASE_FILE_NAME), $(params.REVISION), $(params.TAG); no tests/run.yaml
• task/create-gitlab-release/0.1/create-gitlab-release.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.DESCRIPTION), $(params.NAME), $(params.PROJECT_ID), $(params.RELEASE_REF), $(params.TAG_NAME); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/curl/0.1/curl.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/datree/0.1/datree.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; privileged securityContext; no tests/run.yaml
• task/docker-build/0.1/docker-build.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.build_extra_args), $(params.context), $(params.dockerfile), $(params.image), $(params.push_extra_args)
• task/dockerslim-build/0.1/dockerslim-build.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.image), $(params.push_extra_args)
• task/eks-cluster-create/0.1/eks-cluster-create.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.cluster-name), $(params.desired-nodes), $(params.max-nodes), $(params.min-nodes), $(params.node-type); no tests/run.yaml
• task/eks-cluster-teardown/0.1/eks-cluster-teardown.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.cluster-name), $(params.region); no tests/run.yaml
• task/flake8/0.1/flake8.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.path), $(params.requirements_file)
• task/gcloud/0.1/gcloud.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/gcloud/0.2/gcloud.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/gcloud/0.3/gcloud.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT); no tests/run.yaml
• task/gcs-create-bucket/0.1/gcs-create-bucket.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.bucketName), $(params.project), $(params.region), $(params.serviceAccountPath), $(params.storageClass); no tests/run.yaml
• task/gcs-delete-bucket/0.1/gcs-delete-bucket.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.bucketName), $(params.serviceAccountPath); no tests/run.yaml
• task/gcs-download/0.1/gcs-download.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.location), $(params.path), $(params.serviceAccountPath), $(params.typeDir); no tests/run.yaml
• task/gcs-generic/0.1/gcs-generic.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.serviceAccountPath); no tests/run.yaml
• task/gcs-upload/0.1/gcs-upload.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.location), $(params.path), $(params.serviceAccountPath); no tests/run.yaml
• task/gcs-upload/0.2/gcs-upload.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/gcs-upload/0.3/gcs-upload.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/generate-build-id/0.1/generate-build-id.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-batch-merge/0.1/git-batch-merge.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.batchedRefs), $(params.deleteExisting), $(params.depth), $(params.gitUserEmail), $(params.gitUserName); mutable-tag image(s) (not digest-pinned): 1
• task/git-batch-merge/0.2/git-batch-merge.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.batchedRefs), $(params.deleteExisting), $(params.depth), $(params.gitUserEmail), $(params.gitUserName)
• task/git-batch-merge/0.3/git-batch-merge.yaml — $(params) used inside script (injection risk): $(params.batchedRefs), $(params.deleteExisting), $(params.depth), $(params.gitUserEmail), $(params.gitUserName)
• task/git-cli/0.1/git-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)
• task/git-cli/0.2/git-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)
• task/git-cli/0.3/git-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)
• task/git-cli/0.4/git-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GIT_SCRIPT), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME)
• task/git-clone/0.1/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.2/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.3/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.4/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.5/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.6/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.7/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.8/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-clone/0.9/git-clone.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/git-rebase/0.1/git-rebase.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.COMMIT_MSG), $(params.GIT_USER_EMAIL), $(params.GIT_USER_NAME), $(params.PULL_BRANCH_NAME), $(params.PULL_REMOTE_NAME); no tests/run.yaml
• task/git-version/0.1/git-version.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/gitea-set-status/0.1/gitea-set-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITEA_HOST_URL), $(params.GITEA_HTTPS_OR_HTTP)
• task/github-add-comment/0.1/github-add-comment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.COMMENT), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-comment/0.2/github-add-comment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.COMMENT), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-comment/0.3/github-add-comment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.COMMENT_OR_FILE), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-comment/0.4/github-add-comment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL), $(params.REPLACE), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-comment/0.5/github-add-comment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL), $(params.REPLACE), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-comment/0.6/github-add-comment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.AUTH_TYPE), $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL), $(params.REPLACE); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-comment/0.7/github-add-comment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.COMMENT_OR_FILE), $(params.COMMENT_TAG), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-gist/0.1/github-add-gist.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.FILE_NAME), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-gist/0.2/github-add-gist.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.FILE_NAME), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-add-labels/0.1/github-add-labels.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/github-app-token/0.1/github-app-token.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/github-app-token/0.2/github-app-token.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/github-close-issue/0.1/github-close-issue.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/github-close-issue/0.2/github-close-issue.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/github-create-deployment-status/0.1/github-create-deployment-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTO_INACTIVE), $(params.DEPLOYMENT_ID), $(params.DESCRIPTION), $(params.ENVIRONMENT); mutable-tag image(s) (not digest-pinned): 1
• task/github-create-deployment/0.1/github-create-deployment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.AUTO_MERGE), $(params.DESCRIPTION), $(params.ENVIRONMENT), $(params.GITHUB_HOST_URL), $(params.PAYLOAD); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/github-create-deployment/0.2/github-create-deployment.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTO_MERGE), $(params.DESCRIPTION), $(params.ENVIRONMENT), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-open-pr/0.1/github-open-pr.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.BASE), $(params.BODY), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-open-pr/0.2/github-open-pr.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.BASE), $(params.BODY), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/github-request-reviewers/0.1/github-request-reviewers.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITHUB_HOST_URL), $(params.GITHUB_TOKEN_FILE), $(params.PACKAGE), $(params.PULL_REQUEST_NUMBER)
• task/github-set-status/0.1/github-set-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITHUB_HOST_URL), $(params.REPO_FULL_NAME); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/github-set-status/0.2/github-set-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/github-set-status/0.3/github-set-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.AUTH_TYPE), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITHUB_HOST_URL); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/github-set-status/0.4/github-set-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.GITHUB_HOST_URL), $(params.SHEBANG)
• task/gitlab-add-label/0.1/gitlab-add-label.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.GITLAB_HOST_URL), $(params.REQUEST_URL); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/gitlab-set-status/0.1/gitlab-set-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.DESCRIPTION), $(params.GITLAB_HOST_URL), $(params.REPO_FULL_NAME)
• task/gitlab-set-status/0.2/gitlab-set-status.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.API_PATH_PREFIX), $(params.CONTEXT), $(params.COVERAGE), $(params.DESCRIPTION), $(params.GITLAB_HOST_URL)
• task/gitleaks/0.1/gitleaks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.config_file_path), $(params.config_file_url), $(params.output_format), $(params.repo_path), $(params.report_output_path); mutable-tag image(s) (not digest-pinned): 1
• task/gke-cluster-create/0.1/gke-cluster-create.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.cluster-version), $(params.identifier), $(params.image-type), $(params.machine-type), $(params.max-nodes); no tests/run.yaml
• task/gke-deploy/0.1/gke-deploy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/gogit/0.1/gogit.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/golang-build/0.1/golang-build.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags), $(params.package), $(params.packages)
• task/golang-build/0.2/golang-build.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags), $(params.package), $(params.packages)
• task/golang-build/0.3/golang-build.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags), $(params.package), $(params.packages)
• task/golang-fuzz/0.1/golang-fuzz.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/golang-test/0.1/golang-test.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.context), $(params.flags), $(params.package), $(params.packages)
• task/golang-test/0.2/golang-test.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.context), $(params.flags), $(params.package), $(params.packages)
• task/golangci-lint/0.1/golangci-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags)
• task/golangci-lint/0.2/golangci-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags)
• task/goreleaser/0.1/goreleaser.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags); no tests/run.yaml
• task/goreleaser/0.2/goreleaser.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.flags); no tests/run.yaml
• task/gradle/0.1/gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/gradle/0.2/gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/gradle/0.3/gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/gradle/0.4/gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/grype/0.1/grype.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/hadolint/0.1/hadolint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/helm-conftest/0.1/helm-conftest.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/helm-upgrade-from-repo/0.1/helm-upgrade-from-repo.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 1
• task/helm-upgrade-from-repo/0.2/helm-upgrade-from-repo.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.chart_name), $(params.helm_repo), $(params.overwrite_values), $(params.release_name), $(params.release_namespace)
• task/helm-upgrade-from-repo/0.3/helm-upgrade-from-repo.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.chart_name), $(params.helm_repo), $(params.overwrite_values), $(params.release_name), $(params.release_namespace)
• task/helm-upgrade-from-source/0.1/helm-upgrade-from-source.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 1
• task/helm-upgrade-from-source/0.2/helm-upgrade-from-source.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.charts_dir), $(params.overwrite_values), $(params.release_name), $(params.release_namespace), $(params.release_version)
• task/helm-upgrade-from-source/0.3/helm-upgrade-from-source.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.charts_dir), $(params.overwrite_values), $(params.release_name), $(params.release_namespace), $(params.release_version)
• task/helm-upgrade-from-source/0.4/helm-upgrade-from-source.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.charts_dir), $(params.overwrite_values), $(params.release_name), $(params.release_namespace), $(params.release_version)
• task/ibmcloud/0.1/ibmcloud.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/istio-canary-release/0.1/istio-canary-release.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.V1_WEIGHT), $(params.V2_WEIGHT), $(params.VS_NAME); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/jenkins/0.1/jenkins.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.JENKINS_HOST_URL); mutable-tag image(s) (not digest-pinned): 1
• task/jib-gradle/0.1/jib-gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; $(params) used inside script (injection risk): $(params.INSECUREREGISTRY)
• task/jib-gradle/0.2/jib-gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.DIRECTORY), $(params.IMAGE), $(params.INSECUREREGISTRY)
• task/jib-gradle/0.3/jib-gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.DIRECTORY), $(params.EXTRA_ARGS), $(params.IMAGE), $(params.INSECUREREGISTRY)
• task/jib-gradle/0.4/jib-gradle.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.EXTRA_ARGS), $(params.IMAGE), $(params.INSECUREREGISTRY)
• task/jib-maven/0.1/jib-maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; $(params) used inside script (injection risk): $(params.INSECUREREGISTRY)
• task/jib-maven/0.2/jib-maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.IMAGE), $(params.INSECUREREGISTRY)
• task/jib-maven/0.3/jib-maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.CACERTFILE), $(params.IMAGE), $(params.INSECUREREGISTRY)
• task/jib-maven/0.4/jib-maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.CACERTFILE), $(params.DIRECTORY), $(params.IMAGE), $(params.INSECUREREGISTRY)
• task/jib-maven/0.5/jib-maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.CACERTFILE), $(params.DIRECTORY), $(params.IMAGE), $(params.INSECUREREGISTRY)
• task/jira-get-ticket-status/0.1/jira-get-ticket-status.yaml — no tests/run.yaml
• task/jq/0.1/jq.yaml — $(params) used inside script (injection risk): $(params.filter), $(params.input), $(params.options), $(params.stringOrFile); no tests/run.yaml
• task/jumpstarter-get-lease/0.1/jumpstarter-get-lease.yaml — $(params) used inside script (injection risk): $(params.client-name), $(params.lease-duration), $(params.timeout); unpinned :latest/no-tag image(s): 1; missing tekton.dev/pipelines.minVersion; missing spec.description; missing tekton.dev/categories; no tests/run.yaml
• task/jumpstarter-release-lease/0.1/jumpstarter-release-lease.yaml — $(params) used inside script (injection risk): $(params.client-name), $(params.jmp-lease-id); unpinned :latest/no-tag image(s): 1; missing tekton.dev/pipelines.minVersion; missing spec.description; missing tekton.dev/categories; no tests/run.yaml
• task/jumpstarter-run-cmd/0.1/jumpstarter-run-cmd.yaml — $(params) used inside script (injection risk): $(params.client-name), $(params.jmp-jScript), $(params.jmp-lease-id); missing tekton.dev/pipelines.minVersion; missing spec.description; missing tekton.dev/categories; no tests/run.yaml
• task/kamel-run/0.1/kamel-run.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.container-image), $(params.filename), $(params.namespace), $(params.wait)
• task/kaniko/0.1/kaniko.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.CONTEXT); mutable-tag image(s) (not digest-pinned): 1
• task/kaniko/0.2/kaniko.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.CONTEXT); mutable-tag image(s) (not digest-pinned): 1
• task/kaniko/0.3/kaniko.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.CONTEXT); mutable-tag image(s) (not digest-pinned): 1
• task/kaniko/0.4/kaniko.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.CONTEXT); mutable-tag image(s) (not digest-pinned): 1
• task/kaniko/0.5/kaniko.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/kaniko/0.6/kaniko.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.IMAGE)
• task/kaniko/0.7/kaniko.yaml — $(params) used inside script (injection risk): $(params.IMAGE)
• task/kind/0.1/kind.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/kn-apply/0.1/kn-apply.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/kn-apply/0.2/kn-apply.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/kn/0.1/kn.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/kn/0.2/kn.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/ko/0.1/ko.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/kube-linter/0.1/kube-linter.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.config_file_path), $(params.config_file_url), $(params.default_option), $(params.excludelist), $(params.includelist); mutable-tag image(s) (not digest-pinned): 1
• task/kubeconfig-creator/0.1/kubeconfig-creator.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/kubectl-deploy-pod/0.1/kubectl-deploy-pod.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/kubernetes-actions/0.1/kubernetes-actions.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.script); no tests/run.yaml
• task/kubernetes-actions/0.2/kubernetes-actions.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.script)
• task/kubeval/0.1/kubeval.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/kythe-go/0.1/kythe-go.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; privileged securityContext
• task/kythe-go/0.2/kythe-go.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/makisu/0.1/makisu.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; no tests/run.yaml
• task/markdown-lint/0.1/markdown-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/maven/0.1/maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT); mutable-tag image(s) (not digest-pinned): 1
• task/maven/0.2/maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT); mutable-tag image(s) (not digest-pinned): 1
• task/maven/0.3/maven.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT); mutable-tag image(s) (not digest-pinned): 1
• task/maven/0.4/maven.yaml — $(params) used inside script (injection risk): $(params.MAVEN_MIRROR_URL), $(params.PROXY_HOST), $(params.PROXY_NON_PROXY_HOSTS), $(params.PROXY_PASSWORD), $(params.PROXY_PORT); mutable-tag image(s) (not digest-pinned): 1
• task/mypy-lint/0.1/mypy-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/mypy-lint/0.2/mypy-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.requirements_file)
• task/nexus-lifecycle-scan/0.1/nexus-lifecycle-scan.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/npm/0.1/npm.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/oci-cli/0.1/oci-cli.yaml — mutable-tag image(s) (not digest-pinned): 1; missing spec.description; no tests/run.yaml
• task/openshift-client-kubecfg/0.1/openshift-client-kubecfg.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; $(params) used inside script (injection risk): $(params.SCRIPT); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/openshift-client-python/0.1/openshift-client-python.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT); no tests/run.yaml
• task/openshift-client/0.1/openshift-client.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; $(params) used inside script (injection risk): $(params.SCRIPT)
• task/openshift-client/0.2/openshift-client.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT)
• task/openshift-install/0.1/openshift-install.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.BASE_DOMAIN), $(params.CLUSTER_NAME), $(params.PLATFORM), $(params.PROJECT_ID), $(params.REGION); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/openshift-uninstall/0.1/openshift-uninstall.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/oracle-cloud-storage-download/0.1/oracle-cloud-storage-download.yaml — no tests/run.yaml
• task/oracle-cloud-storage-download/0.2/oracle-cloud-storage-download.yaml — no tests/run.yaml
• task/oracle-cloud-storage-upload/0.1/oracle-cloud-storage-upload.yaml — no tests/run.yaml
• task/oracle-cloud-storage-upload/0.2/oracle-cloud-storage-upload.yaml — no tests/run.yaml
• task/orka-deploy/0.1/orka-deploy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.script)
• task/orka-deploy/0.2/orka-deploy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.script)
• task/orka-full/0.1/orka-full.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.script); privileged securityContext
• task/orka-full/0.2/orka-full.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.script); privileged securityContext
• task/orka-init/0.1/orka-init.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-token-secret-key), $(params.orka-vm-name-config), $(params.orka-vm-name-config-key); privileged securityContext
• task/orka-init/0.2/orka-init.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-token-secret-key), $(params.orka-vm-name-config), $(params.orka-vm-name-config-key); privileged securityContext
• task/orka-teardown/0.1/orka-teardown.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-vm-name-config); privileged securityContext
• task/orka-teardown/0.2/orka-teardown.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.orka-token-secret), $(params.orka-vm-name-config); privileged securityContext
• task/pluto/0.1/pluto.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/powershell/0.1/powershell.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.command), $(params.verbose)
• task/prettier/0.1/prettier.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/prometheus-gate/0.1/prometheus-gate.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/pull-request/0.1/pull-request.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/pylint/0.1/pylint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 1
• task/pylint/0.2/pylint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.path), $(params.requirements_file)
• task/pylint/0.3/pylint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.path), $(params.requirements_file)
• task/pytest/0.1/pytest.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 1
• task/pytest/0.2/pytest.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.ARGS), $(params.REQUIREMENTS_FILE), $(params.SOURCE_PATH)
• task/python-boto3-aws/0.1/python-boto3-aws.yaml — missing spec.description; no tests/run.yaml
• task/python-coverage/0.1/python-coverage.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 1
• task/python-sdk-azure/0.1/python-sdk-azure.yaml — missing spec.description; no tests/run.yaml
• task/redhat-codeready-dependency-analysis/0.1/redhat-codeready-dependency-analysis.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.pkg-installation-directory-path); no tests/run.yaml
• task/redhat-dependency-analytics/0.1/redhat-dependency-analytics.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.project-directory-path)
• task/redhat-dependency-analytics/0.2/redhat-dependency-analytics.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.use-go-mvs-logic)
• task/redhat-dependency-analytics/0.3/redhat-dependency-analytics.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.manifest-file-path), $(params.output-file-path), $(params.trustify-da-endpoint), $(params.use-go-mvs-logic)
• task/remote-scp/0.1/remote-scp.yaml — $(params) used inside script (injection risk): $(params.HOST), $(params.LOCAL_PATH), $(params.PORT), $(params.TO_PATH), $(params.USERNAME); no tests/run.yaml
• task/remote-ssh-commands/0.1/remote-ssh-commands.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.HOST), $(params.PORT), $(params.SSH_SCRIPT), $(params.USERNAME), $(params.USE_INSECURE_CIPHER); no tests/run.yaml
• task/replace-tokens/0.1/replace-tokens.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/rhacs-deployment-check/3.71/rhacs-deployment-check.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/rhacs-deployment-check/4.0/rhacs-deployment-check.yaml — no tests/run.yaml
• task/rhacs-generic/0.1/rhacs-generic.yaml — no tests/run.yaml
• task/rhacs-image-check/3.71/rhacs-image-check.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/rhacs-image-check/4.0/rhacs-image-check.yaml — no tests/run.yaml
• task/rhacs-image-scan/3.71/rhacs-image-scan.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/rhacs-image-scan/4.0/rhacs-image-scan.yaml — no tests/run.yaml
• task/rhacs-m2m-authenticate/0.1/rhacs-m2m-authenticate.yaml — no tests/run.yaml
• task/robot-framework/0.1/robot-framework.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.ROBOT_OPTIONS), $(params.TEST_DIR), $(params.VARIABLES_FILE)
• task/rsync/0.1/rsync.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.direction), $(params.local-path), $(params.remote-ip), $(params.remote-path), $(params.remote-username); no tests/run.yaml
• task/ruby-lint/0.1/ruby-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/s2i/0.1/s2i.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; uses PipelineResources (spec.resources) — not representable in v1; privileged securityContext; mutable-tag image(s) (not digest-pinned): 3
• task/s2i/0.2/s2i.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.IMAGE_NAME), $(params.TLSVERIFY); privileged securityContext; mutable-tag image(s) (not digest-pinned): 3
• task/s2i/0.3/s2i.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.IMAGE), $(params.TLSVERIFY); privileged securityContext; mutable-tag image(s) (not digest-pinned): 2
• task/scorecard/0.1/scorecard.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/send-to-channel-slack/0.1/send-to-channel-slack.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.channel), $(params.message); no tests/run.yaml
• task/send-to-microsoft-teams/0.1/send-to-microsoft-teams.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/send-to-telegram/0.1/send-to-telegram.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/send-to-webex-room/0.1/send-to-webex-room.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.message), $(params.room-id); no tests/run.yaml
• task/send-to-webhook-discord/0.1/send-to-webhook-discord.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/send-to-webhook-slack/0.1/send-to-webhook-slack.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/sendmail/0.1/sendmail.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.body), $(params.recipients), $(params.sender), $(params.subject); no tests/run.yaml
• task/sendmail/0.2/sendmail.yaml — $(params) used inside script (injection risk): $(params.body), $(params.recipients), $(params.sender), $(params.subject); no tests/run.yaml
• task/shellcheck/0.1/shellcheck.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/shp/0.1/shp.yaml — $(params) used inside script (injection risk): $(params.SCRIPT)
• task/skopeo-copy/0.1/skopeo-copy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.srcImageURL), $(params.srcTLSverify); mutable-tag image(s) (not digest-pinned): 1
• task/skopeo-copy/0.2/skopeo-copy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.srcImageURL), $(params.srcTLSverify); mutable-tag image(s) (not digest-pinned): 1
• task/skopeo-copy/0.3/skopeo-copy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.srcImageURL), $(params.srcTLSverify); mutable-tag image(s) (not digest-pinned): 1
• task/skopeo-copy/0.4/skopeo-copy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.destImageURL), $(params.destTLSverify), $(params.multiArch), $(params.srcImageURL), $(params.srcTLSverify); mutable-tag image(s) (not digest-pinned): 1
• task/sonarqube-scanner/0.1/sonarqube-scanner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SONAR_HOST_URL), $(params.SONAR_PROJECT_KEY); mutable-tag image(s) (not digest-pinned): 1; no tests/run.yaml
• task/sonarqube-scanner/0.2/sonarqube-scanner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SONAR_HOST_URL), $(params.SONAR_PROJECT_KEY); mutable-tag image(s) (not digest-pinned): 1
• task/sonarqube-scanner/0.3/sonarqube-scanner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; mutable-tag image(s) (not digest-pinned): 1
• task/sonarqube-scanner/0.4/sonarqube-scanner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SONAR_LOGIN_KEY), $(params.SONAR_PASSWORD_KEY); mutable-tag image(s) (not digest-pinned): 1
• task/stackrox-image-check/0.1/stackrox-image-check.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.image), $(params.insecure-skip-tls-verify); no tests/run.yaml
• task/stackrox-image-scan/0.1/stackrox-image-scan.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.image), $(params.insecure-skip-tls-verify), $(params.output_format); no tests/run.yaml
• task/syft/0.1/syft.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/tekton-catalog-publish/0.1/tekton-catalog-publish.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/tekton-operator-install/0.1/tekton-operator-install.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.INSTALL_DASHBOARD), $(params.INSTALL_EXTENSION_WEBHOOKS), $(params.INSTALL_TRIGGERS), $(params.OPERATOR_VERSION); no tests/run.yaml
• task/terraform-cli/0.1/terraform-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/terraform-cli/0.2/terraform-cli.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/tkn/0.1/tkn.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/tkn/0.2/tkn.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT)
• task/tkn/0.3/tkn.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT)
• task/tkn/0.4/tkn.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT)
• task/tkn/0.5/tkn.yaml — $(params) used inside script (injection risk): $(params.SCRIPT)
• task/trigger-jenkins-job/0.1/trigger-jenkins-job.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.JENKINS_HOST_URL), $(params.JOB_NAME); mutable-tag image(s) (not digest-pinned): 1
• task/trivy-scanner/0.1/trivy-scanner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.IMAGE_PATH)
• task/trivy-scanner/0.2/trivy-scanner.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.AIR_GAPPED_ENABLED), $(params.IMAGE_PATH)
• task/ts-lint/0.1/ts-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/upload-pypi/0.1/upload-pypi.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; no tests/run.yaml
• task/upload-pypi/0.2/upload-pypi.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.PREBUILD_SCRIPT)
• task/valint/0.1/valint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/wget/0.1/wget.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/write-file/0.1/write-file.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/yaml-lint/0.1/yaml-lint.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/yq/0.1/yq.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1
• task/yq/0.2/yq.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.expression)
• task/yq/0.3/yq.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.expression)
• task/yq/0.4/yq.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT), $(params.expression)
• task/yq/0.5/yq.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; $(params) used inside script (injection risk): $(params.SCRIPT), $(params.expression)

Pipeline (3 with findings)

• pipeline/build-push-gke-deploy/0.1/build-push-gke-deploy.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; missing tekton.dev/categories
• pipeline/buildpacks/0.1/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; missing tekton.dev/categories
• pipeline/buildpacks/0.2/buildpacks.yaml — apiVersion tekton.dev/v1beta1 -> should be tekton.dev/v1; missing tekton.dev/categories

StepAction (5 with findings)

• stepaction/git-clone/0.1/git-clone.yaml — apiVersion tekton.dev/v1alpha1 -> should be tekton.dev/v1beta1; missing spec.description
• stepaction/git-clone/0.2/git-clone.yaml — missing spec.description
• stepaction/tekton-catalog-publish/0.1/tekton-catalog-publish.yaml — apiVersion tekton.dev/v1alpha1 -> should be tekton.dev/v1beta1; missing spec.description
• stepaction/tekton-catalog-publish/0.2/tekton-catalog-publish.yaml — apiVersion tekton.dev/v1alpha1 -> should be tekton.dev/v1beta1; missing spec.description
• stepaction/tekton-catalog-publish/0.3/tekton-catalog-publish.yaml — missing spec.description