ROX-29078: switch to per component SA

.tekton/scanner-build.yaml

@@ -79,6 +79,9 @@ spec:
         requests:
           cpu: 2
 
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-scanner
+
   # Multiarch builds sometimes make the pipeline timeout after 1h.
   # Tagged builds wait for blobs to be published which takes about 1h.
   timeouts:

.tekton/scanner-db-build.yaml

@@ -64,6 +64,9 @@ spec:
     secret:
       secretName: '{{ git_auth_secret }}'
 
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-scanner-db
+
   # Tagged builds wait for blobs to be published which takes about 1h.
   timeouts:
     tasks: 2h30m

.tekton/scanner-db-slim-build.yaml

@@ -64,6 +64,9 @@ spec:
     secret:
       secretName: '{{ git_auth_secret }}'
 
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-scanner-db-slim
+
   timeouts:
     tasks: 1h
     finally: 10m

.tekton/scanner-slim-build.yaml

@@ -79,6 +79,9 @@ spec:
         requests:
           cpu: 2
 
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-scanner-slim
+
   # Multiarch builds sometimes make the pipeline timeout after 1h.
   timeouts:
     tasks: 1h30m