diff --git a/copilot/pipelines/react-app-pipeline/buildspec.yml b/copilot/pipelines/react-app-pipeline/buildspec.yml index 7c77d1c..ace9198 100644 --- a/copilot/pipelines/react-app-pipeline/buildspec.yml +++ b/copilot/pipelines/react-app-pipeline/buildspec.yml @@ -11,14 +11,14 @@ phases: # Download trivy. https://aquasecurity.github.io/trivy/v0.48/getting-started/installation/ - echo "install trivy" - RELEASE_VERSION=$(grep -Po '(?<=VERSION_ID=")[0-9]' /etc/os-release) - # - cat << 'EOF' | tee -a /etc/yum.repos.d/trivy.repo - # [trivy] - # name=Trivy repository - # baseurl=https://aquasecurity.github.io/trivy-repo/rpm/releases/$RELEASE_VERSION/$basearch/ - # gpgcheck=1 - # enabled=1 - # gpgkey=https://aquasecurity.github.io/trivy-repo/rpm/public.key - # EOF + - cat << 'EOF' | tee -a /etc/yum.repos.d/trivy.repo + [trivy] + name=Trivy repository + baseurl=https://aquasecurity.github.io/trivy-repo/rpm/releases/$RELEASE_VERSION/$basearch/ + gpgcheck=1 + enabled=1 + gpgkey=https://aquasecurity.github.io/trivy-repo/rpm/public.key + EOF - yum -y update - yum -y install trivy - chmod +x trivy