chores: add ecr image scan on push (#98)

* add ecr image scan on push

* changelog

CHANGELOG.md

@@ -21,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - chore: adding some missing auto_delete attributes
 - chore: Add `auto_delete` to `mlflow-fargate` elb access logs bucket
 - updating `storage/ecr` module to latest pending `v1.8.0` of IDF
+- enabled ECR image scan on push
 
 ## v1.1.0
 

manifests/mlflow-experiments-tracking/storage-modules.yaml

@@ -1,9 +1,11 @@
 name: ecr-mlflow
-path: git::https://github.com/awslabs/idf-modules.git//modules/storage/ecr?ref=main&depth=1
+path: git::https://github.com/awslabs/idf-modules.git//modules/storage/ecr?ref=release/1.7.0&depth=1
 targetAccount: primary
 parameters:
   - name: image-tag-mutability
     value: MUTABLE
+  - name: image-scan-on-push
+    value: True
 ---
 name: buckets
 path: git::https://github.com/awslabs/idf-modules.git//modules/storage/buckets?ref=release/1.3.0&depth=1

manifests/mlops-sagemaker-multiacc/storage-modules.yaml

@@ -1,9 +1,11 @@
 name: ecr-sagemaker-kernel
-path: git::https://github.com/awslabs/idf-modules.git//modules/storage/ecr?ref=main&depth=1
+path: git::https://github.com/awslabs/idf-modules.git//modules/storage/ecr?ref=release/1.7.0&depth=1
 targetAccount: dev
 parameters:
   - name: image-tag-mutability
     value: MUTABLE
+  - name: image-scan-on-push
+    value: True
 ---
 name: buckets
 path: git::https://github.com/awslabs/idf-modules.git//modules/storage/buckets?ref=release/1.7.0&depth=1

manifests/mlops-sagemaker/storage-modules.yaml

@@ -4,6 +4,8 @@ targetAccount: primary
 parameters:
   - name: image-tag-mutability
     value: MUTABLE
+  - name: image-scan-on-push
+    value: True
 ---
 name: buckets
 path: git::https://github.com/awslabs/idf-modules.git//modules/storage/buckets?ref=release/1.7.0&depth=1

manifests/storage-modules.yaml

@@ -4,13 +4,17 @@ targetAccount: primary
 parameters:
   - name: image-tag-mutability
     value: MUTABLE
+  - name: image-scan-on-push
+    value: True
 ---
 name: ecr-sagemaker-kernel
 path: git::https://github.com/awslabs/idf-modules.git//modules/storage/ecr?ref=release/1.7.0&depth=1
 targetAccount: primary
 parameters:
   - name: image-tag-mutability
     value: MUTABLE
+  - name: image-scan-on-push
+    value: True
 ---
 name: buckets
 path: git::https://github.com/awslabs/idf-modules.git//modules/storage/buckets?ref=release/1.7.0&depth=1