Amazon ECR
Identify the exact container image in a repository, including the platform manifests inside a multi-platform image.
Resolve the image inventory
Proofline reads image inventory from selected ECR repositories, along with their reported tag-mutability settings and exclusion filters. An immutable digest identifies the image; a tag records a name used for it.
Optional index-manifest evidence records the images contained in a multi-platform index. Proofline accepts that containment only after the manifest bytes match the requested digest.
Review what an image change means
A change from one image reference to another can affect the platform a workload needs. Registry evidence helps inspect the available manifests while ECS or another workload source provides the deployment context.
An image present in ECR has not necessarily been deployed. Keep the registry record and the workload’s image reference together when reviewing a release.
Connect your AWS account
Choose the AWS account and region for the environment under review. Apply the connection’s scoped read-only role, verify access, and check the environment’s evidence coverage.
Get started with GitHub