diff --git a/copilot/pipelines/react-app-pipeline/buildspec.yml b/copilot/pipelines/react-app-pipeline/buildspec.yml index ace9198..3f2973f 100644 --- a/copilot/pipelines/react-app-pipeline/buildspec.yml +++ b/copilot/pipelines/react-app-pipeline/buildspec.yml @@ -11,14 +11,12 @@ phases: # Download trivy. https://aquasecurity.github.io/trivy/v0.48/getting-started/installation/ - echo "install trivy" - RELEASE_VERSION=$(grep -Po '(?<=VERSION_ID=")[0-9]' /etc/os-release) - - cat << 'EOF' | tee -a /etc/yum.repos.d/trivy.repo - [trivy] + - echo '[trivy] name=Trivy repository baseurl=https://aquasecurity.github.io/trivy-repo/rpm/releases/$RELEASE_VERSION/$basearch/ gpgcheck=1 enabled=1 - gpgkey=https://aquasecurity.github.io/trivy-repo/rpm/public.key - EOF + gpgkey=https://aquasecurity.github.io/trivy-repo/rpm/public.key' | tee -a /etc/yum.repos.d/trivy.repo - yum -y update - yum -y install trivy - chmod +x trivy