roadie-backstage-plugins icon indicating copy to clipboard operation
roadie-backstage-plugins copied to clipboard

scaffolder-backend-module-aws: ECR repo creation - Add Image scanning configuration

Open akundrock opened this issue 2 years ago • 1 comments

Feature Suggestion

Hello! As part of the AWS ECR repo creation workflow I would like to optionally enable "Image Scanning on push". This feature is available through AWS and provides useful information on vulnerability scanning for container images

Possible Implementation

Add a flag to the ECR create repo command to enable image scanning and add the necessary config to the input to the aws/client-ecr library.

Context

The file can be found here: plugins/scaffolder-actions/scaffolder-backend-module-aws/src/actions/ecr/create.ts

The needed config input is documented here: https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ecr/interfaces/createrepositorycommandinput.html#imagescanningconfiguration

Note that I would be willing to pick up this work if it is approved/desired as a feature Thanks!

akundrock avatar Oct 27 '22 15:10 akundrock

https://app.shortcut.com/larder/story/11485

roadie-bot avatar Oct 27 '22 15:10 roadie-bot

It sounds like a good addition and we would love it if you could contribute it! Feel free to ask for any help if you need it!

kissmikijr avatar Oct 28 '22 11:10 kissmikijr

Successfully merged to master!

akundrock avatar Nov 03 '22 14:11 akundrock