putting s3 secrets in one object

helm/templates/_scan-pulumi-crossguard.yaml

@@ -4,23 +4,13 @@
     parameters:
       - name: working-dir
   container:
-    image: {{ .Values.images.pulumiCrossguard | quote }}
+    image: {{ .Values.images.pulumiCrossguard }}
     env:
       - name: PULUMI_ACCESS_TOKEN
         valueFrom:
           secretKeyRef:
             name: amp-security-pipeline-secrets
             key: PULUMI_ACCESS_TOKEN
-      - name: AWS_ACCESS_KEY_ID
-        valueFrom:
-          secretKeyRef:
-            name: amp-security-pipeline-secrets
-            key: AWS_ACCESS_KEY_ID
-      - name: AWS_SECRET_ACCESS_KEY
-        valueFrom:
-          secretKeyRef:
-            name: amp-security-pipeline-secrets
-            key: AWS_SECRET_ACCESS_KEY
     command:
       - sh
       - -c
@@ -29,7 +19,7 @@
         set -eu
         mkdir -p /workspace/reports
         cd "/workspace/{{ `{{inputs.parameters.working-dir}}` }}"
-        pulumi preview --policy-pack "{{ .Values.pulumi.policyPackPath }}" > /workspace/reports/pulumi-crossguard.json 2>&1 || true
+        pulumi preview --policy-pack {{ .Values.pulumi.policyPackPath | quote }} > /workspace/reports/pulumi-crossguard.json 2>&1 || true
     volumeMounts:
       - name: workspace
         mountPath: /workspace