Amazon ECR image-to-container mapping that shows which images are actively running in containers and how widely they’re deployed, and extended vulnerability scanning support for minimal base images including scratch, distroless, and Chainguard containers.