add possibility to turn on/off image scanning not only during repo creation, but when repo already created
This commit is contained in:
parent
d8b6b48fa3
commit
3501d9a65d
@ -77,6 +77,10 @@ func main() {
|
|||||||
if err != nil {
|
if err != nil {
|
||||||
log.Fatal(fmt.Sprintf("error creating ECR repo: %v", err))
|
log.Fatal(fmt.Sprintf("error creating ECR repo: %v", err))
|
||||||
}
|
}
|
||||||
|
err = updateImageScannningConfig(svc, trimHostname(repo, registry), scanOnPush)
|
||||||
|
if err != nil {
|
||||||
|
log.Fatal(fmt.Sprintf("error updating scan on push for ECR repo: %v", err))
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if lifecyclePolicy != "" {
|
if lifecyclePolicy != "" {
|
||||||
@ -134,6 +138,15 @@ func ensureRepoExists(svc *ecr.ECR, name string, scanOnPush bool) (err error) {
|
|||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func updateImageScannningConfig(svc *ecr.ECR, name string, scanOnPush bool) (err error) {
|
||||||
|
input := &ecr.PutImageScanningConfigurationInput{}
|
||||||
|
input.SetRepositoryName(name)
|
||||||
|
input.SetImageScanningConfiguration(&ecr.ImageScanningConfiguration{ScanOnPush: &scanOnPush})
|
||||||
|
_, err = svc.PutImageScanningConfiguration(input)
|
||||||
|
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
|
||||||
func uploadLifeCyclePolicy(svc *ecr.ECR, lifecyclePolicy string, name string) (err error) {
|
func uploadLifeCyclePolicy(svc *ecr.ECR, lifecyclePolicy string, name string) (err error) {
|
||||||
input := &ecr.PutLifecyclePolicyInput{}
|
input := &ecr.PutLifecyclePolicyInput{}
|
||||||
input.SetLifecyclePolicyText(lifecyclePolicy)
|
input.SetLifecyclePolicyText(lifecyclePolicy)
|
||||||
|
Loading…
Reference in New Issue
Block a user