From 07f917ec7670eea34e51cc4fa271e1fdb3a1361d Mon Sep 17 00:00:00 2001
From: Pat Myron <PatMyron@users.noreply.github.com>
Date: Mon, 13 Dec 2021 11:29:35 -0800
Subject: [PATCH] chore(bootstrap):
 AWS::ECR::Repository.ImageScanningConfiguration.ScanOnPush

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-imagescanningconfiguration
---
 packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml b/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml
index ce3cf9fbe3c18..b7871900b3a46 100644
--- a/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml
+++ b/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml
@@ -202,6 +202,8 @@ Resources:
   ContainerAssetsRepository:
     Type: AWS::ECR::Repository
     Properties:
+      ImageScanningConfiguration:
+        ScanOnPush: true
       RepositoryName:
         Fn::If:
           - HasCustomContainerAssetsRepositoryName
@@ -491,7 +493,7 @@ Resources:
       Type: String
       Name:
         Fn::Sub: '/cdk-bootstrap/${Qualifier}/version'
-      Value: '9'
+      Value: '10'
 Outputs:
   BucketName:
     Description: The name of the S3 bucket owned by the CDK toolkit stack