Fix broken scan-docker-images CI job (#2099)

* Use cimg/base:current-22.04, use /usr/bin/bash, and move shell options to their own step.

* Fix code typo

* remove curl package command

* fix trivy

* remove commands

* add sudo for trivycli copy

---------

Co-authored-by: pgvishnuram <vishnu@astronomer.io>

.circleci/config.yml

@@ -29,8 +29,8 @@ parameters:
 jobs:
   trivy-scan-docker:
     docker:
-      - image: cimg/base:stable
-    shell: /bin/sh -leo pipefail
+      - image: cimg/base:current-22.04
+    shell: /usr/bin/bash
     parameters:
       docker_image:
         type: string
@@ -48,15 +48,15 @@ jobs:
     steps:
       - setup_remote_docker:
           docker_layer_caching: true
+      - run: set -euo pipefail
       - checkout
       - run:
           name: Pull Docker image
           command: docker pull << parameters.docker_image >>
       - run:
           name: Install trivy
           command: |
-            apk add --update-cache --upgrade curl rpm bash
-            curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/master/contrib/install.sh | sh -s -- -b /usr/local/bin
+            curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/master/contrib/install.sh | sudo sh -s -- -b /usr/local/bin
             date +%F > date
       - restore_cache:
           keys:
@@ -86,21 +86,21 @@ jobs:
 
   twistcli-scan-docker:
     docker:
-      - image: cimg/base:stable
-    shell: /bin/sh -leo pipefail
+      - image: cimg/base:current-22.04
+    shell: /usr/bin/bash
     parameters:
       docker_image:
         type: string
     steps:
       - setup_remote_docker:
           docker_layer_caching: true
+      - run: set -euo pipefail
       - run:
           name: Pull Docker image
           command: docker pull << parameters.docker_image >>
       - run:
           name: Install twistcli
           command: |
-            apk add --update-cache --upgrade curl
             curl -k -u $USER:$PASSWORD --output twistcli $CONSOLE_URL"/api/v1/util/twistcli"
             chmod +x twistcli
       - run:
@@ -332,7 +332,7 @@ jobs:
 
   check-commander-airflow-version:
     docker:
-      - image: cimg/base:stable
+      - image: cimg/base:current-22.04
     steps:
       - checkout
       - setup_remote_docker:

.circleci/config.yml.j2

@@ -27,8 +27,8 @@ parameters:
 jobs:
   trivy-scan-docker:
     docker:
-      - image: cimg/base:stable
-    shell: /bin/sh -leo pipefail
+      - image: cimg/base:current-22.04
+    shell: /usr/bin/bash
     parameters:
       docker_image:
         type: string
@@ -46,15 +46,15 @@ jobs:
     steps:
       - setup_remote_docker:
           docker_layer_caching: true
+      - run: set -euo pipefail
       - checkout
       - run:
           name: Pull Docker image
           command: docker pull << parameters.docker_image >>
       - run:
           name: Install trivy
           command: |
-            apk add --update-cache --upgrade curl rpm bash
-            curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/master/contrib/install.sh | sh -s -- -b /usr/local/bin
+            curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/master/contrib/install.sh | sudo sh -s -- -b /usr/local/bin
             date +%F > date
       - restore_cache:
           keys:
@@ -84,21 +84,21 @@ jobs:
 
   twistcli-scan-docker:
     docker:
-      - image: cimg/base:stable
-    shell: /bin/sh -leo pipefail
+      - image: cimg/base:current-22.04
+    shell: /usr/bin/bash
     parameters:
       docker_image:
         type: string
     steps:
       - setup_remote_docker:
           docker_layer_caching: true
+      - run: set -euo pipefail
       - run:
           name: Pull Docker image
           command: docker pull << parameters.docker_image >>
       - run:
           name: Install twistcli
           command: |
-            apk add --update-cache --upgrade curl
             curl -k -u $USER:$PASSWORD --output twistcli $CONSOLE_URL"/api/v1/util/twistcli"
             chmod +x twistcli
       - run:
@@ -267,7 +267,7 @@ jobs:
 
   check-commander-airflow-version:
     docker:
-      - image: cimg/base:stable
+      - image: cimg/base:current-22.04
     steps:
       - checkout
       - setup_remote_docker: