update resource types to use hardened images (#331)

cloud-gov · Sep 6, 2023 · f677105 · f677105
1 parent 5d10db8
commit f677105
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 4 deletions.
diff --git a/ci/audit-pipeline.yml b/ci/audit-pipeline.yml
@@ -135,15 +135,22 @@ resource_types:
     tag: latest
 
 - name: email-resource
-  type: docker-image
+  type: registry-image
   source:
-    repository: pcfseceng/email-resource
+    aws_access_key_id: ((ecr_aws_key))
+    aws_secret_access_key: ((ecr_aws_secret))
+    repository: email-resource
+    aws_region: us-gov-west-1
     tag: latest
 
 - name: cron-resource
-  type: docker-image
+  type: registry-image
   source:
-    repository: cftoolsmiths/cron-resource
+    aws_access_key_id: ((ecr_aws_key))
+    aws_secret_access_key: ((ecr_aws_secret))
+    repository: cron-resource
+    aws_region: us-gov-west-1
+    tag: latest
 
 - name: git
   type: registry-image

diff --git a/ci/pipeline.yml b/ci/pipeline.yml
@@ -1507,3 +1507,12 @@ resource_types:
     repository: git-resource
     aws_region: us-gov-west-1
     tag: latest
+
+- name: cf
+  type: registry-image
+  source:
+    aws_access_key_id: ((ecr_aws_key))
+    aws_secret_access_key: ((ecr_aws_secret))
+    repository: cf-resource
+    aws_region: us-gov-west-1
+    tag: latest