容器镜像仓库管理指南：AWS ECR设置、镜像安全扫描与多区域复制最佳实践

container-registry-management by aj-geddes/useful-ai-prompts

141 周安装量

160 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill container-registry-management

云服务开发运维安全

🇨🇳中文介绍

容器镜像仓库管理

概述

实现全面的容器镜像仓库管理，包括镜像扫描、漏洞检测、保留策略、访问控制和多区域复制。

使用场景

容器镜像存储与分发
安全扫描与合规性检查
镜像保留与清理
镜像仓库访问控制
多区域部署
镜像签名与验证
成本优化

快速开始

最小化工作示例：

# ecr-setup.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: ecr-management
  namespace: operations
data:
  setup-ecr.sh: |
    #!/bin/bash
    set -euo pipefail

    REGISTRY_NAME="myapp"
    REGION="us-east-1"
    ACCOUNT_ID="123456789012"

    echo "Setting up ECR repository..."

    # Create ECR repository
    aws ecr create-repository \
      --repository-name "$REGISTRY_NAME" \
      --region "$REGION" \
      --encryption-configuration encryptionType=KMS,kmsKey=arn:aws:kms:$REGION:$ACCOUNT_ID:key/12345678-1234-1234-1234-123456789012 \
      --image-tag-mutability IMMUTABLE \
      --image-scanning-configuration scanOnPush=true || true

// ... (完整实现请参阅参考指南)

参考指南

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

指南	内容
AWS ECR 设置与管理	AWS ECR 设置与管理
容器镜像构建与推送	容器镜像构建与推送
使用 Notary 进行镜像签名	使用 Notary 进行镜像签名
镜像仓库访问控制	镜像仓库访问控制
镜像仓库监控	镜像仓库监控

🇺🇸English

Container Registry Management

Overview
When to Use
Quick Start
Reference Guides
Best Practices

Overview

Implement comprehensive container registry management including image scanning, vulnerability detection, retention policies, access control, and multi-region replication.

When to Use

Container image storage and distribution
Security scanning and compliance
Image retention and cleanup
Registry access control
Multi-region deployments
Image signing and verification
Cost optimization

Quick Start

Minimal working example:

# ecr-setup.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: ecr-management
  namespace: operations
data:
  setup-ecr.sh: |
    #!/bin/bash
    set -euo pipefail

    REGISTRY_NAME="myapp"
    REGION="us-east-1"
    ACCOUNT_ID="123456789012"

    echo "Setting up ECR repository..."

    # Create ECR repository
    aws ecr create-repository \
      --repository-name "$REGISTRY_NAME" \
      --region "$REGION" \
      --encryption-configuration encryptionType=KMS,kmsKey=arn:aws:kms:$REGION:$ACCOUNT_ID:key/12345678-1234-1234-1234-123456789012 \
      --image-tag-mutability IMMUTABLE \
      --image-scanning-configuration scanOnPush=true || true

// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
AWS ECR Setup and Management	AWS ECR Setup and Management
Container Image Build and Push	Container Image Build and Push
Image Signing with Notary	Image Signing with Notary
Registry Access Control	Registry Access Control
Registry Monitoring	Registry Monitoring

Best Practices

✅ DO

Scan images before deployment
Use image tag immutability
Implement retention policies
Control registry access with IAM
Sign images for verification
Replicate across regions
Monitor registry storage
Use private registries

❌ DON'T

Push to public registries
Use latest tag in production
Allow anonymous pulls
Store secrets in images
Keep old images indefinitely
Push without scanning
Use default credentials
Share registry credentials

Weekly Installs

101

Repository

aj-geddes/usefu…-prompts

GitHub Stars

116

First Seen

Jan 21, 2026

Security Audits

Gen Agent Trust HubPass SocketPass SnykPass

Installed on

opencode84

gemini-cli83

codex81

claude-code81

cursor76

github-copilot67