Before proceeding with the scan, set up TMAS, then install Docker.
- Login to AWS CLI using the following command:
$ aws configure
Prepare an IAM user that has ECR access permission that you will use for the command above. - Authenticate to your default Elastic Container Registry using the following command:
aws ecr get-login-password --region region | docker login --username AWS --password-stdin aws_account_id.dkr.ecr.region.amazonaws.com
- Run the TMAS scan command:
./tmas scan registry:aws_account_id.dkr.ecr.us-east-2.amazonaws.com/yourimage:tag
For more information, refer to the AWS article, Using Amazon ECR with the AWS CLI.