File tree Expand file tree Collapse file tree 1 file changed +34
-0
lines changed
Expand file tree Collapse file tree 1 file changed +34
-0
lines changed Original file line number Diff line number Diff line change @@ -97,6 +97,40 @@ Pushing: XXXXXXXXXXXX.dkr.ecr.us-east-1.amazonaws.com/alpine:3.12.12
9797Done
9898```
9999
100+ ### GitLab Workflow Example
101+
102+ ```
103+ .ecr_scan:
104+ image:
105+ name: docker:latest
106+ stage: test
107+ variables:
108+ APP: dts_all_batch
109+ PATH_DOCKERFILE: /
110+ DOCKER_TLS_CERTDIR: ""
111+ ECR_CLIENT_VERSION: 0.6.0
112+ AWS_ECR_CLIENT_IGNORE_CVE: CVE-2022-37434
113+ AWS_ECR_CLIENT_IGNORE_CVE_LEVEL: LOW INFORMATIONAL UNDEFINED
114+ services:
115+ - docker:dind
116+ before_script:
117+ - apk --no-cache add curl
118+ - docker login --username AWS --password-stdin $AWS_ACCOUNT_ID.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com/$APP < credentials #AWS Role Credentials
119+ - export TAG_LATEST=$AWS_ACCOUNT_ID.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com/$APP:latest
120+ - export TAG_COMMIT=$AWS_ACCOUNT_ID.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com/$APP:$CI_COMMIT_SHORT_SHA
121+ - export STAGE_REPO=$AWS_ACCOUNT_ID.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com/stage
122+ - export DOCKER_PATH=$PATH_DOCKERFILE
123+ - mkdir ecr; cd ecr; curl --fail --silent --show-error -o ecr.zip -L https://releases.fivexl.io/aws-ecr-client-golang/v${ECR_CLIENT_VERSION}/aws-ecr-client_${ECR_CLIENT_VERSION}_linux_amd64.zip
124+ - unzip ecr.zip; mv aws-ecr-client /bin/; cd ..
125+ script:
126+ - docker pull $TAG_LATEST || true
127+ - docker build --no-cache -t $TAG_COMMIT -t $TAG_LATEST -f $DOCKER_PATH .
128+ - aws-ecr-client --images $TAG_COMMIT --stage-ecr-repo $STAGE_REPO
129+ needs:
130+ - job: getCredentials
131+ artifacts: true
132+ ```
133+
100134### Junit report example
101135
102136```
You can’t perform that action at this time.
0 commit comments