Merge branch 'main' into save-build-report-to-file

kyma-project · Jan 29, 2025 · 644cd7a · 644cd7a
2 parents 8da6e8f + f7d33d6
commit 644cd7a
Show file tree

Hide file tree

Showing 26 changed files with 74 additions and 43 deletions.
diff --git a/.github/actions/image-builder/action.yml b/.github/actions/image-builder/action.yml
@@ -82,7 +82,7 @@ runs:
       id: prepare-tags
       shell: bash
     
-    - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250120-7cbeb783
+    - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250124-67a01b66
       id: build
       with:
         args: --name=${{ inputs.image-name }} --context=${{ inputs.context }} --dockerfile=${{ inputs.dockerfile }} --azure-access-token=${{ inputs.ado-token }} --oidc-token=${{ inputs.oidc-token }} ${{ steps.prepare-build-args.outputs.build-args }} ${{ steps.prepare-tags.outputs.tags }} --export-tags=${{ inputs.export-tags }} --config=${{ inputs.config }} --env-file=${{ inputs.env-file }} --build-in-ado=true --use-go-internal-sap-modules=${{ inputs.use-go-internal-sap-modules }}
diff --git a/.github/workflows/all-checks-passed.yml b/.github/workflows/all-checks-passed.yml
@@ -0,0 +1,26 @@
+name: all-checks-passed
+on:
+  pull_request:
+    types:
+      [
+        opened,
+        synchronize,
+        reopened,
+        ready_for_review,
+        edited,
+        labeled,
+        milestoned,
+      ]
+
+jobs:
+  all-checks:
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+      contents: read
+    steps:
+      - uses: wechuli/allcheckspassed@2e5e8bbc775f5680ed5d02e3a22e2fc7219792ac
+        with:
+          delay: '3'
+          retries: '30'
+          polling_interval: '1'
diff --git a/.github/workflows/autobump-docs-index-md.yml b/.github/workflows/autobump-docs-index-md.yml
@@ -59,6 +59,6 @@ jobs:
             --workdir /github/test-infra \
             --privileged \
             --cap-drop ALL \
-            europe-docker.pkg.dev/kyma-project/prod/markdown-index:v20250120-7cbeb783 \
+            europe-docker.pkg.dev/kyma-project/prod/markdown-index:v20250124-67a01b66 \
             --config=${{ env.AUTOBUMP_CONFIG_PATH }} \
             --labels-override=kind/chore,area/documentation
diff --git a/.github/workflows/autobump-security-config.yaml b/.github/workflows/autobump-security-config.yaml
@@ -71,7 +71,7 @@ jobs:
             --rm \
             --privileged \
             --cap-drop ALL \
-            europe-docker.pkg.dev/kyma-project/prod/image-detector:v20250120-1ff5a2b4 \
+            europe-docker.pkg.dev/kyma-project/prod/image-detector:v20250124-67a01b66 \
             --terraform-dir=${{ env.TERRAFORM_CONFIGS_DIR }} \
             --sec-scanner-config=${{ env.SEC_SCANNERS_CONFIG_PATH }} \
             --autobump-config=${{ env.AUTOBUMP_CONFIG_PATH }}
diff --git a/.github/workflows/image-autobumper.yml b/.github/workflows/image-autobumper.yml
@@ -4,7 +4,7 @@ on:
     inputs:
       docker-image:
         description: 'Docker image with tag to be used'
-        default: 'europe-docker.pkg.dev/kyma-project/prod/image-autobumper:v20250120-7cbeb783'
+        default: 'europe-docker.pkg.dev/kyma-project/prod/image-autobumper:v20250124-67a01b66'
         type: string
       autobump-config-path:
         description: 'Path to the autobump config file, relative to the repository root'

diff --git a/.github/workflows/image-syncer.yml b/.github/workflows/image-syncer.yml
@@ -100,7 +100,7 @@ jobs:
           --workdir /github/workspace
           --rm
           --volume "$GITHUB_WORKSPACE:/github/workspace"
-          europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20250120-7cbeb783
+          europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20250124-67a01b66
           --images-file=/github/workspace/external-images.yaml
           --access-token=${{ steps.authenticate_in_gcp.outputs.access_token }}
           --dry-run=${{ steps.set_dry_run_flag.outputs.DRY_RUN }}

diff --git a/.github/workflows/pull-validate-kaniko-build-config.yml b/.github/workflows/pull-validate-kaniko-build-config.yml
@@ -50,7 +50,7 @@ jobs:
           secrets: |-
             ado-pat:${{ vars.GCP_KYMA_PROJECT_PROJECT_ID }}/${{ vars.IMAGE_BUILDER_ADO_PAT_GCP_SECRET_NAME }}
 
-      - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250120-7cbeb783
+      - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250124-67a01b66
         id: build
         with:
           args: --name=test-infra/ginkgo --context=. --dockerfile=images/ginkgo/Dockerfile --azure-access-token=${{ steps.secrets.outputs.ado-pat }} --oidc-token=${{ steps.get_oidc.outputs.jwt }} --env-file='envs' --build-in-ado=true --test-kaniko-build-config=true --config="./configs/image-builder-client-config.yaml"
diff --git a/configs/terraform/core/apis.tf b/configs/terraform/core/apis.tf
@@ -6,7 +6,7 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = "6.16.0"
+      version = "6.18.0"
     }
   }
 }

diff --git a/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars b/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars
@@ -1,8 +1,8 @@
 project_id                                           = "sap-kyma-neighbors-dev"
 region                                               = "europe-west3"
 service_account_keys_rotator_service_name            = "service-account-keys-rotator"
-service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250120-724a9f0b" #gitleaks:allow
+service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250124-67a01b66" #gitleaks:allow
 service_account_keys_cleaner_service_name            = "service-account-keys-cleaner"
-service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250120-7cbeb783" #gitleaks:allow
+service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250124-67a01b66" #gitleaks:allow
 service_account_key_latest_version_min_age           = 24
 service_account_keys_cleaner_scheduler_cron_schedule = "0 0 * * 1-5"
diff --git a/configs/terraform/environments/prod/terraform.tfvars b/configs/terraform/environments/prod/terraform.tfvars
@@ -8,9 +8,9 @@ kyma_project_artifact_registry_collection = {
   },
 }
 service_account_keys_rotator_service_name            = "service-account-keys-rotator"
-service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250120-724a9f0b" #gitleaks:allow
+service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250124-67a01b66" #gitleaks:allow
 service_account_keys_cleaner_service_name            = "service-account-keys-cleaner"
-service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250120-7cbeb783" #gitleaks:allow
+service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250124-67a01b66" #gitleaks:allow
 service_account_key_latest_version_min_age           = 24
 service_account_keys_cleaner_scheduler_cron_schedule = "0 0 * * 1-5"
 

diff --git a/configs/terraform/modules/cors-proxy/cors-proxy.tf b/configs/terraform/modules/cors-proxy/cors-proxy.tf
@@ -28,7 +28,7 @@ resource "google_cloud_run_service" "cors_proxy" {
   template {
     spec {
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20250120-7cbeb783"
+        image = "europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20250124-67a01b66"
         env {
           name  = "COMPONENT_NAME"
           value = "cors-proxy"

diff --git a/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf b/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf
@@ -67,7 +67,7 @@ resource "google_cloud_run_service" "github_webhook_gateway" {
     spec {
       service_account_name = google_service_account.github_webhook_gateway.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20250120-7cbeb783"
+        image = "europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20250124-67a01b66"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id

diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf b/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf
@@ -47,7 +47,7 @@ resource "google_cloud_run_service" "gcs_bucket_mover" {
     spec {
       service_account_name = google_service_account.gcs_bucket_mover.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20250120-6318b30f"
+        image = "europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20250124-67a01b66"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id

diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf
@@ -24,7 +24,7 @@ resource "google_cloud_run_service" "github_issue_creator" {
     spec {
       service_account_name = google_service_account.github_issue_creator.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20250120-7cbeb783"
+        image = "europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20250124-67a01b66"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id

diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf
@@ -24,7 +24,7 @@ resource "google_cloud_run_service" "github_issue_finder" {
     spec {
       service_account_name = google_service_account.github_issue_finder.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20250120-7cbeb783"
+        image = "europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20250124-67a01b66"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id

diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf b/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf
@@ -23,7 +23,7 @@ resource "google_cloud_run_service" "secrets_leak_log_scanner" {
     spec {
       service_account_name = google_service_account.secrets_leak_log_scanner.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20250120-7cbeb783" #gitleaks:allow
+        image = "europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20250124-67a01b66" #gitleaks:allow
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id

diff --git a/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf b/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf
@@ -31,7 +31,7 @@ resource "google_cloud_run_service" "security_dashboard_token" {
   template {
     spec {
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20250120-7cbeb783" #gitleaks:allow ignore gitleaks detection
+        image = "europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20250124-67a01b66" #gitleaks:allow ignore gitleaks detection
         env {
           name = "CLIENT_SECRET"
           value_from {

diff --git a/go.mod b/go.mod
@@ -29,12 +29,12 @@ require (
 	github.com/spf13/pflag v1.0.5
 	github.com/spf13/viper v1.19.0
 	github.com/stretchr/testify v1.10.0
-	github.com/zricethezav/gitleaks/v8 v8.23.1
+	github.com/zricethezav/gitleaks/v8 v8.23.2
 	go.uber.org/zap v1.27.0
 	golang.org/x/exp v0.0.0-20240909161429-701f63a606c0
 	golang.org/x/net v0.34.0
 	golang.org/x/oauth2 v0.25.0
-	google.golang.org/api v0.217.0
+	google.golang.org/api v0.218.0
 	gopkg.in/yaml.v3 v3.0.1
 	k8s.io/api v0.27.2
 	k8s.io/apimachinery v0.27.2
@@ -207,7 +207,7 @@ require (
 	gomodules.xyz/jsonpatch/v2 v2.3.0 // indirect
 	google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250106144421-5f5ef82da422 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250115164207-1a7da9e5054f // indirect
 	google.golang.org/grpc v1.69.4 // indirect
 	google.golang.org/protobuf v1.36.3 // indirect
 	gopkg.in/fsnotify.v1 v1.4.7 // indirect

diff --git a/go.sum b/go.sum
@@ -688,8 +688,8 @@ github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9de
 github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
-github.com/zricethezav/gitleaks/v8 v8.23.1 h1:PABSIS77b6gOMvd3gKJXFWZrnYX+G0OCsFmPlBpOO4Q=
-github.com/zricethezav/gitleaks/v8 v8.23.1/go.mod h1:j8lWGw/glcyisjpSfIynRvXjrsJp9AkoY+4bOz95Zak=
+github.com/zricethezav/gitleaks/v8 v8.23.2 h1:JcR9f7RxFfsVep32PBEFIMTLQaQY0/EjCUII0cLEHfI=
+github.com/zricethezav/gitleaks/v8 v8.23.2/go.mod h1:j8lWGw/glcyisjpSfIynRvXjrsJp9AkoY+4bOz95Zak=
 go.einride.tech/aip v0.68.0 h1:4seM66oLzTpz50u4K1zlJyOXQ3tCzcJN7I22tKkjipw=
 go.einride.tech/aip v0.68.0/go.mod h1:7y9FF8VtPWqpxuAxl0KQWqaULxW4zFIesD6zF5RIHHg=
 go.opencensus.io v0.15.0/go.mod h1:UffZAU+4sDEINUGP/B7UfBBkq4fqLu9zXAX7ke6CHW0=
@@ -1011,8 +1011,8 @@ google.golang.org/api v0.31.0/go.mod h1:CL+9IBCa2WWU6gRuBWaKqGWLFFwbEUXkfeMkHLQW
 google.golang.org/api v0.32.0/go.mod h1:/XrVsuzM0rZmrsbjJutiuftIzeuTQcEeaYcSk/mQ1dg=
 google.golang.org/api v0.35.0/go.mod h1:/XrVsuzM0rZmrsbjJutiuftIzeuTQcEeaYcSk/mQ1dg=
 google.golang.org/api v0.36.0/go.mod h1:+z5ficQTmoYpPn8LCUNVpK5I7hwkpjbcgqA7I34qYtE=
-google.golang.org/api v0.217.0 h1:GYrUtD289o4zl1AhiTZL0jvQGa2RDLyC+kX1N/lfGOU=
-google.golang.org/api v0.217.0/go.mod h1:qMc2E8cBAbQlRypBTBWHklNJlaZZJBwDv81B1Iu8oSI=
+google.golang.org/api v0.218.0 h1:x6JCjEWeZ9PFCRe9z0FBrNwj7pB7DOAqT35N+IPnAUA=
+google.golang.org/api v0.218.0/go.mod h1:5VGHBAkxrA/8EFjLVEYmMUJ8/8+gWWQ3s4cFH0FxG2M=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
@@ -1067,8 +1067,8 @@ google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 h1:ToEetK57OidYuqD
 google.golang.org/genproto v0.0.0-20241118233622-e639e219e697/go.mod h1:JJrvXBWRZaFMxBufik1a4RpFw4HhgVtBBWQeQgUj2cc=
 google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576 h1:CkkIfIt50+lT6NHAVoRYEyAvQGFM7xEwXUUywFvEb3Q=
 google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576/go.mod h1:1R3kvZ1dtP3+4p4d3G8uJ8rFk/fWlScl38vanWACI08=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20250106144421-5f5ef82da422 h1:3UsHvIr4Wc2aW4brOaSCmcxh9ksica6fHEr8P1XhkYw=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20250106144421-5f5ef82da422/go.mod h1:3ENsm/5D1mzDyhpzeRi1NR784I0BcofWBoSc5QqqMK4=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20250115164207-1a7da9e5054f h1:OxYkA3wjPsZyBylwymxSHa7ViiW1Sml4ToBrncvFehI=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20250115164207-1a7da9e5054f/go.mod h1:+2Yz8+CLJbIfL9z73EW45avw8Lmge3xVElCP9zEKi50=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
 google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
 google.golang.org/grpc v1.21.0/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=

diff --git a/images/alpine/git/gke-aws-auth/Dockerfile b/images/alpine/git/gke-aws-auth/Dockerfile
@@ -1,4 +1,4 @@
-FROM google/cloud-sdk:506.0.0 AS base
+FROM google/cloud-sdk:508.0.0 AS base
 
 ARG AWS_IAM_AUTHENTICATOR_VERSION="0.6.11"
 RUN curl -fsSL \

diff --git a/prow/cluster/components/automated-approver_external-plugin.yaml b/prow/cluster/components/automated-approver_external-plugin.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: automated-approver
-        image: europe-docker.pkg.dev/kyma-project/prod/automated-approver:v20250120-7cbeb783
+        image: europe-docker.pkg.dev/kyma-project/prod/automated-approver:v20250124-67a01b66
         imagePullPolicy: Always
         args:
         - --dry-run=false

diff --git a/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml b/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml
@@ -13,7 +13,7 @@ spec:
         spec:
           containers:
             - name: secret-checker-untrusted
-              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250120-7cbeb783 #gitleaks:allow
+              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250124-67a01b66 #gitleaks:allow
               imagePullPolicy: IfNotPresent
               command:
                 - /externalsecretschecker
@@ -49,7 +49,7 @@ spec:
         spec:
           containers:
             - name: secret-checker-trusted
-              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250120-7cbeb783 #gitleaks:allow
+              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250124-67a01b66 #gitleaks:allow
               imagePullPolicy: IfNotPresent
               command:
                 - /externalsecretschecker
@@ -85,7 +85,7 @@ spec:
         spec:
           containers:
             - name: secret-checker-prow
-              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250120-7cbeb783 #gitleaks:allow
+              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250124-67a01b66 #gitleaks:allow
               imagePullPolicy: IfNotPresent
               command:
                 - /externalsecretschecker

diff --git a/prow/config.yaml b/prow/config.yaml
@@ -432,6 +432,7 @@ tide:
         - kyma-project/istio
         - kyma-project/api-gateway
         - kyma-project/networking-dev-tools
+        - kyma-project/test-infra
       reviewApprovedRequired: true
     - labels:
         - lgtm

diff --git a/prow/jobs/kyma-project/test-infra/kyma-bot.yaml b/prow/jobs/kyma-project/test-infra/kyma-bot.yaml
@@ -22,7 +22,7 @@ presubmits: # runs on PRs
       spec:
         serviceAccountName: sa-prowjob-gcp-logging-client
         containers:
-          - image: "europe-docker.pkg.dev/kyma-project/prod/usersmapchecker:v20250120-7cbeb783"
+          - image: "europe-docker.pkg.dev/kyma-project/prod/usersmapchecker:v20250124-67a01b66"
             imagePullPolicy: Always
             securityContext:
               privileged: false

diff --git a/prow/jobs/kyma-project/test-infra/prow-periodics.yaml b/prow/jobs/kyma-project/test-infra/prow-periodics.yaml
@@ -21,7 +21,7 @@ postsubmits: # runs on main
       spec:
         serviceAccountName: sa-prow-deploy
         containers:
-          - image: "europe-docker.pkg.dev/kyma-project/prod/e2e-gcloud:v20250117-32b9cc58"
+          - image: "europe-docker.pkg.dev/kyma-project/prod/e2e-gcloud:v20250129-1bafe763"
             securityContext:
               privileged: false
               seccompProfile:

diff --git a/sec-scanners-config.yaml b/sec-scanners-config.yaml
@@ -2,18 +2,22 @@ module-name: test-infra
 rc-tag: rc-tag
 kind: kyma
 protecode:
-    - europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20250120-7cbeb783
-    - europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20250120-7cbeb783
-    - europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20250120-7cbeb783
-    - europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20250120-7cbeb783
-    - europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20250120-6318b30f
-    - europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20250120-7cbeb783
-    - europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20250120-7cbeb783
-    - europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250120-724a9f0b
-    - europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250120-7cbeb783
+    - europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250124-67a01b66
+    - europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250124-67a01b66
     - europe-docker.pkg.dev/kyma-project/prod/test-infra/signify-secret-rotator:v20250108-fae88ec9
     - europe-docker.pkg.dev/kyma-project/prod/test-infra/slackmessagesender:v20250108-fae88ec9
 whitesource:
     language: golang-mod
     exclude:
         - '**/*_test.go'
+checkmarx-one:
+    preset: go-default
+    exclude:
+        - '**/*_test.go'