Policy Packs

guardrails-samples

Enforcing scan on push for repositories helps detect vulnerabilities and security issues in images before they are deployed, reducing the risk of running compromised or insecure containers in your environment.

Enforce Scan on Push Is Enabled for AWS ECR Repositories

main

aws_ecr_repository_scan_on_push_enabled

Configure the Scan on Push setting required for `AWS &gt; ECR &gt; Repository`.&#92;nThis setting determines whether images are scanned after being pushed to the repository.&#92;n

Policy Settings