ECR repository has image scans disabled.
Repository image scans should be enabled to ensure vulnerable software can be discovered and remediated as soon as possible.
Impact
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Enable ECR image scanning
1
2
3
4
5
6
7
8
9
10
11
|
Resources:
GoodExample:
Type: AWS::ECR::Repository
Properties:
RepositoryName: "test-repository"
ImageTagImmutability: IMMUTABLE
ImageScanningConfiguration:
ScanOnPush: True
EncryptionConfiguration:
EncryptionType: KMS
KmsKey: "alias/ecr-key"
|
Enable ECR image scanning
1
2
3
4
5
6
7
8
9
|
resource "aws_ecr_repository" "good_example" {
name = "bar"
image_tag_mutability = "MUTABLE"
image_scanning_configuration {
scan_on_push = true
}
}
|
Links