aws-ecr-image-manifest-content
OCI/Docker image manifests and embedded labels or annotations can contain sensitive build metadata or credentials.
Where it sits
| location | BatchGetImage.images[].imageManifest |
|---|
| location kind | code_artifact |
|---|
| data kinds | source_code_secret credential password api_key sensitive_data |
|---|
| emits edge | ContainsCredential |
|---|
| service | ECR (aws:ecr) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | BatchGetImage |
|---|
| response path | images[].imageManifest |
|---|
| encoding | json |
|---|
| params | {"imageIds": [{"imageTag": "\u003ctag\u003e"}], "repositoryName": "\u003crepository\u003e"} |
|---|
Required permissions
References