Update all AWS ECR repositories to use image scanning on push, and run an initial scan

update_ecr_image_scan.rb

#!/usr/bin/env ruby

require 'aws-sdk-ecr'
ecr = Aws::ECR::Client.new

ecr.describe_repositories.repositories.map(&:repository_name).each do |repo|
  # set to scan on image push, this only affects newly pushed images
  ecr.put_image_scanning_configuration(
    repository_name: repo,
    image_scanning_configuration: {
      scan_on_push: true
    }
  )
  
  # run an initial scan on the 'latest' tag
  ecr.start_image_scan(
    repository_name: repo,
    image_id: {image_tag: 'latest'}
  )
end