nik/newdwh2021
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: 脆弱性スキャンコマンドに追加

Browse Source
This commit is contained in:
shimoda.m@nds-tyo.co.jp 2025-05-19 10:16:52 +09:00
parent b96722d894
commit 66e5eeaa63
6 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
vulnerability-scan/build-push-scanpoint.sh
View File

@ -15,6 +15,7 @@ then
bash build-jskult-webapp.sh || { echo "build-jskult-webapp.sh failed"; exit 1; } bash build-jskult-webapp.sh || { echo "build-jskult-webapp.sh failed"; exit 1; }
bash build-export-dbdump.sh || { echo "build-export-dbdump.sh failed"; exit 1; } bash build-export-dbdump.sh || { echo "build-export-dbdump.sh failed"; exit 1; }
bash build-transfer-medpass-data.sh || { echo "build-transfer-medpass-data.sh failed"; exit 1; } bash build-transfer-medpass-data.sh || { echo "build-transfer-medpass-data.sh failed"; exit 1; }
bash build-jskult-transfer-receive-file.sh || { echo "build-jskult-transfer-receive-file.sh failed"; exit 1; }
else else
echo "AWS login failed" echo "AWS login failed"
fi fi

16
vulnerability-scan/build-push-scanpoint/build-jskult-transfer-receive-file.sh Normal file
View File

@ -0,0 +1,16 @@
#!/bin/bash
cd ../../ecs/jskult-transfer-receive-file || { echo "Error: ディレクトリ変更に失敗しました"; exit 1; }
pipenv update || { echo "pipenv update failed"; exit 1; }
docker pull python:3.12-slim-bookworm
aws ecr get-login-password --region ap-northeast-1 | docker login --username AWS --password-stdin 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com
docker build -t mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr . --no-cache
docker tag mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:latest 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:scan-point
docker push 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:scan-point

1
vulnerability-scan/retag-push-latest.sh
View File

@ -15,6 +15,7 @@ then
bash retag-jskult-webapp.sh || { echo "retag-jskult-webapp.sh failed"; exit 1; } bash retag-jskult-webapp.sh || { echo "retag-jskult-webapp.sh failed"; exit 1; }
bash retag-export-dbdump.sh || { echo "retag-export-dbdump.sh failed"; exit 1; } bash retag-export-dbdump.sh || { echo "retag-export-dbdump.sh failed"; exit 1; }
bash retag-transfer-medpass-data.sh || { echo "retag-transfer-medpass-data.sh failed"; exit 1; } bash retag-transfer-medpass-data.sh || { echo "retag-transfer-medpass-data.sh failed"; exit 1; }
bash retag-jskult-transfer-receive-file.sh || { echo "retag-jskult-transfer-receive-file.sh failed"; exit 1; }
else else
echo "AWS login failed" echo "AWS login failed"
fi fi

11
vulnerability-scan/retag-push-latest/retag-jskult-transfer-receive-file.sh Normal file
View File

@ -0,0 +1,11 @@
#!/bin/bash
docker pull 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:scan-point
docker tag 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:scan-point 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:latest
docker push 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:latest
docker tag 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr:latest 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-product-jskult-transfer-receive-file-ecr:latest
docker push 826466435614.dkr.ecr.ap-northeast-1.amazonaws.com/mbj-newdwh2021-product-jskult-transfer-receive-file-ecr:latest

1
vulnerability-scan/validate-image-digest/validate-stg-latest-scanpoint-digest.sh
View File

@ -23,6 +23,7 @@ staging_repositories=(
"mbj-newdwh2021-staging-jskult-webapp-ecr" "mbj-newdwh2021-staging-jskult-webapp-ecr"
"mbj-newdwh2021-staging-export-dbdump-ecr" "mbj-newdwh2021-staging-export-dbdump-ecr"
"mbj-newdwh2021-staging-transfer-medpass-data-ecr" "mbj-newdwh2021-staging-transfer-medpass-data-ecr"
"mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr"
) )
# 各ステージングリポジトリをループ # 各ステージングリポジトリをループ

1
vulnerability-scan/validate-image-digest/validate-stg-prd-ecr-digest.sh
View File

@ -23,6 +23,7 @@ repositories=(
"mbj-newdwh2021-staging-jskult-webapp-ecr mbj-newdwh2021-product-jskult-webapp-ecr" "mbj-newdwh2021-staging-jskult-webapp-ecr mbj-newdwh2021-product-jskult-webapp-ecr"
"mbj-newdwh2021-staging-export-dbdump-ecr mbj-newdwh2021-product-export-dbdump-ecr" "mbj-newdwh2021-staging-export-dbdump-ecr mbj-newdwh2021-product-export-dbdump-ecr"
"mbj-newdwh2021-staging-transfer-medpass-data-ecr mbj-newdwh2021-product-transfer-medpass-data-ecr" "mbj-newdwh2021-staging-transfer-medpass-data-ecr mbj-newdwh2021-product-transfer-medpass-data-ecr"
"mbj-newdwh2021-staging-jskult-transfer-receive-file-ecr mbj-newdwh2021-product-jskult-transfer-receive-file-ecr"
) )
# 各ペアのリポジトリをループ # 各ペアのリポジトリをループ