fix: cdk nag aspect executed before plugins

cdklabs / cdk-cicd-wrapper

This repository contains the infrastructure as code to wrap your AWS CDK project with CI/CD around it.

https://cdklabs.github.io/cdk-cicd-wrapper/

Apache License 2.0

21 stars 5 forks source link

Closed gyalai-aws closed 2 months ago

gyalai-aws commented 2 months ago

Fixed:

CDK Nag scanning was running before SecurityPlugins
default codeBuildEnvSettings is extended not completely replaced, so incident buildImage downgrades will not happen