close #712 test reachability enricher with all languages that atom su…

…pports
smithy-security · Jan 20, 2025 · 961f0b2 · 961f0b2
1 parent ae2b90b
commit 961f0b2
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/components/enrichers/reachability/task.yaml b/components/enrichers/reachability/task.yaml
@@ -18,15 +18,19 @@ spec:
       description: The workspace containing the source-code to scan.
   steps:
   - name: run-cdxgen
-    image: ghcr.io/cyclonedx/cdxgen:v10.9.5
+    image: ghcr.io/cyclonedx/cdxgen:v11.1.0
     command:
       - node
+    env:
+      - name: NPM_INSTALL_ARGS
+        value: "--force --ignore-scripts --package-lock --legacy-peer-deps"
     args:
       - /opt/cdxgen/bin/cdxgen.js
       - -t
       - $(params.enricher-reachability-programming-language)
       - --deep
       - -r
+      - --feature-flags safe-pip-install
       - -p
       - -o
       - $(workspaces.output.path)/source-code/bom.json