MEDIUM
Source
CloudSploit
ID
amazon-ecr-scan-on-push

Amazon ECR Scan on Push

Ensures Amazon ECR container images are automatically scanned for security vulnerabilities after being pushed to a repository.

Scan on Push for Amazon ECR is an automated vulnerability assessment feature that helps improve the security of ECR container images by scanning them for OS vulnerabilities.

Enable “Scan on Push” for your Amazon ECR repositories.