Skip to content

Fix code scanning alert - Ensure ECR Image Tags are immutable #20

@dragonfleas

Description

@dragonfleas

Tracking issue for:

Looking for discussion on this topic, is it important that we use MUTABLE tags? I can't recall a time where we've needed to mutate an already existing tag name, also feel like it's a bad practice.

The security risk there too is if someone gained access to ECR they would be able to swap an image with the same tag for a malicious image.

Tagging @synapsestudios/platform

Metadata

Metadata

Assignees

No one assigned

    Labels

    help wantedExtra attention is needed

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions