Skip to content

Update example for remote registry auth

What does this MR do and why?

Recently, I set up container scanning with authentication to an ECR recently and was unable to get the current example to work. The variables seem to be in the wrong spot, they should be in the job, like in the previous example on the page. I couldn't get the DOCKER_USER and DOCKER_PASSWORD variables to work. Trivy requires AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and AWS_DEFAULT_REGION so I used those instead.

The before script was failing because neither curl or zip are installed. There should be no reason to install aws since trivy has it included, so I removed the before script.

Screenshots or screen recordings

Before:
before
After:
after

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports