{{- define "template.scan-socketdev" -}}
- name: scan-socketdev
  inputs:
    parameters:
      - name: working-dir
  container:
    image: {{ .Values.images.socketdev | quote }}
    env:
      - name: SOCKET_DEV_API_KEY
        valueFrom:
          secretKeyRef:
            name: amp-security-pipeline-secrets
            key: SOCKET_DEV_API_KEY
    command:
      - sh
      - -c
    args:
      - |
        set -eu
        mkdir -p /workspace/reports
        socketdev scan "/workspace/{{ `{{inputs.parameters.working-dir}}` }}" --format json --output /workspace/reports/socketdev.json || true
    volumeMounts:
      - name: workspace
        mountPath: /workspace
{{- end }}