Brad Gray
Brad Gray
@uname223 - Thank you for raising this. You are correct: enhanced scanning does not support image scan summaries in the DescribeImages API response. We do have this support under consideration....
Hi @JohnPreston, thanks for raising this. We are currently working to add CloudFormation support for this resource.
The [scanning configuration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-imagescanningconfiguration.html) in AWS::ECR::Repository is for repository level configuration. ECR has launched [RegistryScanningConfiguration](https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutRegistryScanningConfiguration.html), and the request here it to add support for this in CloudFormation. We still have this...
Thanks for the request. Alpine 3.19 is supported in both enhanced scanning (https://docs.aws.amazon.com/inspector/latest/user/supported.html#supported-os-ecr) and basic scanning (https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning-basic.html#image-scan-basic-support-operating-systems).
ECR basic scanning docs now reflect support for Alpine 3.20. This applies to both versions of ECR basic scanning: https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning-basic.html#image-scan-basic-support-operating-systems
Resolving. Enhanced scanning does support alpine 3.20. Basic scanning does also support it as well, although our docs aren't yet updated to reflect this.
When using ECR's enhanced scanning, you can get some of this by using Inspector's ListFindings API directly. Example: ``` aws inspector2 list-findings --filter-criteria="awsAccountId=[{comparison="EQUALS",value="${accountId"}],severity=[{comparison="EQUALS",value="CRITICAL"}]" ``` https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListFindings.html