awslabs / awslabs/simple-code-scanning-pipeline
Add check for ECR images via ECR service
Open
- Dominant language
- TypeScript
- Stars
- 19
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
Use the built-in scanning of the ECR service to fail if there are any critical CVEs.
- Add a separate folder for holding ECR images
- Add Action that will upload the image to ECR, then check if there are any critical CVEs in it
Contributor guide
Research direction
No files or tests are named. Review the repository's existing TypeScript and GitHub Actions layout, then identify where a separate ECR image folder and upload action belong. Done means the action uploads the image to ECR and fails when ECR reports critical CVEs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, github-actions, typescript
- Domain
- ci-cd, cloud, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100