Severity Framework
Snyk CCSS
Rule category
Containers / Images
Is your enviroment affected by this misconfiguration?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsFrameworks
CIS-Controls
CSA-CCM
- Snyk ID SNYK-CC-00263
- credit Snyk Research Team
Description
The ECR image scan for known vulnerabilities is disabled.
How to fix?
Set image_scanning_configuration.scan_on_push attribute to true.
resource "aws_ecr_repository" "foo" {
name = "bar"
image_tag_mutability = "MUTABLE"
image_scanning_configuration {
scan_on_push = true
}
}