fix: Add SECURE_API_TOKEN_SECRET env var (#51)

* fix: Add SECURE_API_TOKEN_SECRET env var

* fix(lint): Add !Sub to template parameter

* feat: Update all images to use quay.io

* fix: Revert cloud-bench registry

Author: tembleking

templates/CloudBench.yaml

@@ -171,7 +171,7 @@ Resources:
                   outputDir: "/tmp/cloud-custodian"
                   policyFile: "/home/custodian/aws-benchmarks.yml"
 
-          Image: sysdiglabs/cloud-connector-s3-bucket-config:latest
+          Image: quay.io/sysdig/cloud-connector-s3-bucket-config:latest
           Essential: false
           MountPoints:
             - SourceVolume: config

templates/CloudConnector.yaml

@@ -177,7 +177,7 @@ Resources:
                         #- securityhub:
                         #    productArn: arn:aws:securityhub:${AWS::Region}::product/sysdig/sysdig-secure-for-cloud
 
-          Image: sysdiglabs/cloud-connector-s3-bucket-config:latest
+          Image: quay.io/sysdig/cloud-connector-s3-bucket-config:latest
           Essential: false
           LogConfiguration:
             LogDriver: awslogs
@@ -201,7 +201,7 @@ Resources:
           DependsOn:
             - ContainerName: Config
               Condition: SUCCESS
-          Image: sysdiglabs/cloud-connector:latest
+          Image: quay.io/sysdig/cloud-connector:latest
           Essential: true
           PortMappings:
             - ContainerPort: 5000

templates/CloudScanning.yaml

@@ -218,12 +218,14 @@ Resources:
               Value: !If [ ECSDeployed, "true", "false" ]
             - Name: TELEMETRY_DEPLOYMENT_METHOD
               Value: cft
+            - Name: SECURE_API_TOKEN_SECRET
+              Value: !Sub ${SysdigSecureAPITokenSsm}
           Secrets:
             - Name: SECURE_URL
               ValueFrom: !Sub arn:${AWS::Partition}:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${SysdigSecureEndpointSsm}
             - Name: SECURE_API_TOKEN
               ValueFrom: !Sub arn:${AWS::Partition}:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${SysdigSecureAPITokenSsm}
-          Image: sysdiglabs/cloud-scanning:latest
+          Image: quay.io/sysdig/cloud-scanning:latest
           Essential: true
           LogConfiguration:
             LogDriver: awslogs