Prerequisites for a DevSecOps pipeline
In this section, we will create all the necessary resources for the DevSecOps pipeline. Perform the following tasks to create the prerequisites:
- Create a
CodeCommit
repository with the nameCatalogDetail
. Push the source code files available insidechapter-09/catalog_detail/
andchapter-09/buildspecfiles/
. The folder structure inside theCatalogDetail
repository should look like the following:
- Create two ECR repositories and name them
miscimages
andcatalogdetail
. Make sure to enable the Scan on push option. Upload the following two images to themiscimages
ECR repository:node:14
anchore/inline-scan:v0.6.0
- Edit the
catalog_detail/Dockerfile
file and replace your AWS account number. Similarly, in thebuildspec-anchore.yml
file, replace theANCHORE_CI_IMAGE
value with the ECR URL value formiscimages
that contains the Anchore inline-scan...