AWS ECR Inspector

This tool ingests AWS ECR scan data (repository_name, image_tag, region) and outputs a structured risk profile. It supports both vulnerability findings and misconfigurations, aggregating counts by severity and listing top CVEs with guidance.
It processes either a provided scan report or an imported findings bundle; it computes a risk score via a weighted scheme and returns a prioritized remediation list suitable for automation or handoff to security workflows.
Who benefits: security engineers, DevOps, and platform teams responsible for container pipelines. Use cases include pre-release image validation, ongoing registry audits, and regulatory reporting. The tool's core value lies in translating raw scan data into actionable risk insight, enabling consistent prioritization across teams and faster containment of high-severity flaws.
Unique value: formalized risk scoring, configurable thresholds, and a structured remediation plan that can be reused in CI/CD pipelines or SIEM integrations. If historical scans are provided, simple trend comparisons are possible to detect drift or remediation progress.