macOS
brew install docker-credential-helper-ecrlocal Homebrew formula metadata
sudo port install docker-credential-helper-ecrMacPorts ports tree · sysutils/docker-credential-helper-ecr/Portfile · source: api.github.com
brew
Docker Credential Helper for Amazon ECR. Version 0.12.0 via Homebrew; verified from local package data.
install
brew install docker-credential-helper-ecrlocal Homebrew formula metadata
sudo port install docker-credential-helper-ecrMacPorts ports tree · sysutils/docker-credential-helper-ecr/Portfile · source: api.github.com
sudo apk add docker-credential-ecr-loginAlpine Linux edge package indexes · docker-credential-ecr-login · source: dl-cdn.alpinelinux.org
overview
Docker Credential Helper for Amazon ECR
history
Amazon ECR Docker Credential Helper is the Docker credential helper for Amazon Elastic Container Registry. It lets Docker fetch ECR authentication through AWS credentials instead of requiring users or automation to run docker login for ECR registries.
The project is maintained under awslabs and implements Docker's credential-helper protocol as docker-credential-ecr-login. Its README describes the helper as a bridge between Docker, Amazon ECR, and the normal AWS credential chain, including shared credentials files, environment variables, EC2 and ECS roles, assumed roles, credential_process, and web identity support.
The changelog shows an initial 0.1.0 release in 2018, followed by endpoint and credential-chain work: FIPS endpoints in 0.2.0, PrivateLink endpoints in 0.3.0, assumed-role chaining and IRSA support in 0.4.0, ECR Public and IMDSv2 support in 0.5.0, AWS SSO and Apple Silicon support in 0.6.0, and later support for isolated, IPv6, and dual-stack ECR endpoint patterns.
The README documents installation paths across Amazon Linux, Debian, Ubuntu, Arch, Alpine, macOS Homebrew, MacPorts, Windows releases, mise, and Go source installs. That distribution spread reflects its role as a small but standard glue package for CI systems, developer laptops, and hosts that pull private ECR images.
Users place docker-credential-ecr-login on PATH and set Docker's credsStore or per-registry credHelpers entry to ecr-login. After that, docker pull and docker push against private or public ECR registries use AWS credentials automatically, with optional AWS_PROFILE selection and local helper cache controls.
For package maintainers, this package is interesting because it connects three packaging worlds: Docker's external credential-helper interface, AWS's credential provider chain, and distro or language package managers. A broken helper can make otherwise-correct Docker and AWS installs unable to pull private images, so version and path details matter.
security posture
narrow executable package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
/home/<username>/.docker/config.json/root/.docker/config.json~/.docker/config.json~/.aws/configC:\Users\<username>\.docker\config.jsonC:\Windows\System32\config\systemprofile\.docker\config.jsonCredential-bearing paths to review before unattended agent runs.
~/.aws/credentialsexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
docker-credential-ecr-login | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/awslabs/amazon-ecr-credential-helper
install metadata
| Package key | brew:docker-credential-helper-ecr |
|---|---|
| Version | 0.12.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/docker-credential-helper-ecr |
| Homepage | https://github.com/awslabs/amazon-ecr-credential-helper |
| Repository | https://github.com/awslabs/amazon-ecr-credential-helper |
| Upstream docs | https://github.com/awslabs/amazon-ecr-credential-helper#readme |
| License | Apache-2.0 |
| Source archive | https://github.com/awslabs/amazon-ecr-credential-helper/archive/refs/tags/v0.12.0.tar.gz |
| Build dependencies | go |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | docker-credential-helper-ecr |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
docker-credential-helper-ecr
sudo port install docker-credential-helper-ecrdocker-credential-ecr-login 0.12.0-r3
Credential helper for Docker to use the AWS Elastic Container Registry
https://github.com/awslabs/amazon-ecr-credential-helper
sudo apk add docker-credential-ecr-logindocker-credential-ecr-login-doc 0.12.0-r3
Credential helper for Docker to use the AWS Elastic Container Registry (documentation)
https://github.com/awslabs/amazon-ecr-credential-helper
sudo apk add docker-credential-ecr-login-docsource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.