coldpass

Browse / Agent tools

cdklabs/cdk-ecr-deployment

A CDK construct to deploy docker image to Amazon ECR

    Works.Tested on 2026-10-28. From the README alone, on Linux with Haiku and Linux with Luna.

    Share card: cdklabs/cdk-ecr-deployment works
    The card X shows when you post.Download

    What we checked

    Does it run from the README?Yes. Running in 10:10 on a clean Linux box.The run
    Does it do what the README says?2 of 2 claims held up.Evidence

    “The README's documented cdk synth command renders an ECR deployment custom resource for the S3 archive example”

    Expected CloudFormation template containing Custom::CDKECRDeployment. Got Custom::CDKECRDeployment.

    “The library supports copying an archive tarball image from S3 to ECR, shown by the s3-archive example synthesizing a deployment resource”

    Expected CloudFormation template containing Custom::CDKECRDeployment. Got Custom::CDKECRDeployment.

    Which setups did we try?Works with Haiku, Luna.Setups

    Linux / Haiku: works, Oct 28, rev f7aa9ea. Linux / Luna: works, Oct 28, rev f7aa9ea.

    Needs keys, a login or a browser?No.Details

    None seen

    Is it safe to run?Made outbound connections: yes (hosts not recorded) by <guest-path>What we saw

    Review signals across current setups: connection review, sensitive read. 40 listed items (named-host connections, static matches, dependency advisories) are below and do not change this verdict. 42 static matches retained as context.

    Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 82 distinct locations. 2 findings. 12 attributed processes.

    OSV reports a known vulnerability in this dependency version. 6 distinct locations. 20 findings.

    A repository process attempted to read this sensitive path. Kind of file: saved web login. 2 findings. 5 attributed processes.

    Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

    Full event, path and process lists for each observed setup:

    A quiet run is not a safety guarantee.

    Is it maintained?Slow · 84 commits in 90 days · 84 merged PRs in 90 days · 9 open issues · 0 open PRsActivity

    slow: last commit 0 days ago; 84 commits and 84 merged PRs in 90 days; 9 open issues, 0 open PRs; 0 of 24 recent threads got a maintainer reply; latest release 2026-10-28

    Recent commits on GitHub

    Can I show this on my README?Copy the badge.Badge
    ![coldpass](https://coldpass.dev/badge/cdklabs--cdk-ecr-deployment.svg)

    The run

    Oct 28 · rev f7aa9ea
    0:002:004:006:008:0010:0010:10

    Independent test, not endorsed by the project.