Automic VaultAutomic Vault

brew

Install docker-credential-helper-ecr with Homebrew, MacPorts, apk

Docker Credential Helper for Amazon ECR. Version 0.12.0 via Homebrew; verified from local package data.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install docker-credential-helper-ecr

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install docker-credential-helper-ecr

MacPorts ports tree · sysutils/docker-credential-helper-ecr/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add docker-credential-ecr-login

Alpine Linux edge package indexes · docker-credential-ecr-login · source: dl-cdn.alpinelinux.org

overview

Package summary

Docker Credential Helper for Amazon ECR

Commands and aliases

  • docker-credential-ecr-login

history

Project history and usage

Amazon ECR Docker Credential Helper is the Docker credential helper for Amazon Elastic Container Registry. It lets Docker fetch ECR authentication through AWS credentials instead of requiring users or automation to run docker login for ECR registries.

Project history

The project is maintained under awslabs and implements Docker's credential-helper protocol as docker-credential-ecr-login. Its README describes the helper as a bridge between Docker, Amazon ECR, and the normal AWS credential chain, including shared credentials files, environment variables, EC2 and ECS roles, assumed roles, credential_process, and web identity support.

The changelog shows an initial 0.1.0 release in 2018, followed by endpoint and credential-chain work: FIPS endpoints in 0.2.0, PrivateLink endpoints in 0.3.0, assumed-role chaining and IRSA support in 0.4.0, ECR Public and IMDSv2 support in 0.5.0, AWS SSO and Apple Silicon support in 0.6.0, and later support for isolated, IPv6, and dual-stack ECR endpoint patterns.

Adoption history

The README documents installation paths across Amazon Linux, Debian, Ubuntu, Arch, Alpine, macOS Homebrew, MacPorts, Windows releases, mise, and Go source installs. That distribution spread reflects its role as a small but standard glue package for CI systems, developer laptops, and hosts that pull private ECR images.

How it is used

Users place docker-credential-ecr-login on PATH and set Docker's credsStore or per-registry credHelpers entry to ecr-login. After that, docker pull and docker push against private or public ECR registries use AWS credentials automatically, with optional AWS_PROFILE selection and local helper cache controls.

Why package nerds care

For package maintainers, this package is interesting because it connects three packaging worlds: Docker's external credential-helper interface, AWS's credential provider chain, and distro or language package managers. A broken helper can make otherwise-correct Docker and AWS installs unable to pull private images, so version and path details matter.

Timeline

  • 2018: v0.1.0 tagged as the initial release.
  • 2019: Debian and Amazon Linux packaging tags appear in the upstream repository.
  • 2021: v0.5.0 adds ECR Public and IMDSv2 support.
  • 2021: v0.6.0 adds AWS SSO, EC2 metadata role assumption, and Apple Silicon support.
  • 2024: v0.8.0 adds C2S endpoint pattern support and experimental Windows ARM binaries.
  • 2026: v0.12.0 adds dual-stack ECR public endpoint support and SHA256 cache keys.

Related projects

  • The project is directly related to Docker's docker-credential-helpers suite, Amazon ECR, the AWS CLI and SDK credential chain, Amazon ECS and EC2 IAM roles, and Kubernetes IRSA workflows.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Linux
/home/<username>/.docker/config.json/root/.docker/config.json
Unix
~/.docker/config.json~/.aws/config
Windows
C:\Users\<username>\.docker\config.jsonC:\Windows\System32\config\systemprofile\.docker\config.json

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.aws/credentials

executables

Installed executables

CommandKindExposureNote
docker-credential-ecr-logincliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.12.0
manager updated
local dataok
upstreamcurrent
latest detectedv0.12.0

https://github.com/awslabs/amazon-ecr-credential-helper

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:docker-credential-helper-ecr
Version0.12.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/docker-credential-helper-ecr
Homepagehttps://github.com/awslabs/amazon-ecr-credential-helper
Repositoryhttps://github.com/awslabs/amazon-ecr-credential-helper
Upstream docshttps://github.com/awslabs/amazon-ecr-credential-helper#readme
LicenseApache-2.0
Source archivehttps://github.com/awslabs/amazon-ecr-credential-helper/archive/refs/tags/v0.12.0.tar.gz
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namedocker-credential-helper-ecr
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

MacPorts95%

docker-credential-helper-ecr

sudo port install docker-credential-helper-ecr
  • normalized package name match
  • Matched by: Docker Credential Helper Ecr
MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/docker-credential-helper-ecr/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
apk92%

docker-credential-ecr-login 0.12.0-r3

Credential helper for Docker to use the AWS Elastic Container Registry

https://github.com/awslabs/amazon-ecr-credential-helper

sudo apk add docker-credential-ecr-login
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: docker-credential-ecr-login
  • 1 dependencies
  • 1 provides
  • installed executable or alias match
  • Matched by: Docker Credential Ecr Login
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: docker-credential-ecr-login from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk92%

docker-credential-ecr-login-doc 0.12.0-r3

Credential helper for Docker to use the AWS Elastic Container Registry (documentation)

https://github.com/awslabs/amazon-ecr-credential-helper

sudo apk add docker-credential-ecr-login-doc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: docker-credential-ecr-login
  • installed executable or alias match
  • Matched by: Docker Credential Ecr Login
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: docker-credential-ecr-login-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment