Class: ECR

Inherits:
Mapper show all
Defined in:
lib/aws_recon/collectors/ecr.rb

Overview

Collect ECR resources

Constant Summary

Constants inherited from Mapper

Mapper::SINGLE_REGION_SERVICES

Instance Method Summary collapse

Methods inherited from Mapper

#initialize

Constructor Details

This class inherits a constructor from Mapper

Instance Method Details

#collect ⇒ Object

Returns an array of resources.



10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
 
# File 'lib/aws_recon/collectors/ecr.rb', line 10

def collect
  resources = []

  #
  # describe_repositories
  #
  @client.describe_repositories.each_with_index do |response, page|
    log(response.context.operation_name, page)

    response.repositories.each do |repo|
      struct = OpenStruct.new(repo.to_h)
      struct.type = 'repository'
      struct.arn = repo.repository_arn
      struct.policy = @client
                      .get_repository_policy({ repository_name: repo.repository_name }).policy_text.parse_policy

      struct.images = []
      #
      # describe images
      #
      @client.list_images( {repository_name: repo.repository_name}).image_ids.each_with_index do | image, page |
        log(response.context.operation_name, 'list_images', page)
        image_hash = image.to_h
        # 
        # describe image scan results
        #
        result = @client.describe_image_scan_findings({ repository_name: repo.repository_name, image_id: { image_digest: image.image_digest, image_tag: image.image_tag } })
        image_hash["image_scan_status"] = result.image_scan_status.to_h
        image_hash["image_scan_findings"] = result.image_scan_findings.to_h

        rescue Aws::ECR::Errors::ScanNotFoundException => e
          # No scan result for this image. No action needed
        ensure
          struct.images << image_hash
      end
    rescue Aws::ECR::Errors::ServiceError => e
      log_error(e.code)

      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
    ensure
      resources.push(struct.to_h)
    end
  end

  resources
end