trivy

copilot/pipelines/react-app-pipeline/buildspec.yml

@@ -67,10 +67,9 @@ phases:
           done;
         done;
       - ls -lah ./infrastructure
-      - for f in ./infrastructure/*; do echo $f; cat $f; done
       # Run trivy scan on the docker images.
-      # - trivy image --vuln-type os --no-progress --format table -o container-scanning-report.txt --severity CRITICAL,HIGH $(jq -r '.services[].image' ./infrastructure/prod-svc-prod-env.stack.yml)
-      # - cat container-scanning-report.txt
+      - trivy image --vuln-type os --no-progress --format table -o container-scanning-report.txt --severity CRITICAL,HIGH $(jq -r '.Parameters[].ContainerImage' ./infrastructure/dev-svc-dev-env.params.json)
+      - cat container-scanning-report.txt
 artifacts:
   files:
     - "infrastructure/*"

docker_test.sh

@@ -9,6 +9,6 @@
 ##########################################################################
 docker rmi react-app:latest -f
 docker build -t react-app:latest . --no-cache
-docker run -d -p 80:8080 react-app:latest # -p localport:containerport
+docker run -p 80:8080 react-app:latest # -p localport:containerport
 
 # open your browser and go to `localhost:80`.