Enable scan on push for all AWS ECR repositories that don't have it enabled, in nushell

enable-scan-on-push.nu

aws ecr describe-repositories | from json | get repositories.repositoryName
| sort
| each { |repo|
    let scanOnPush = (aws ecr batch-get-repository-scanning-configuration --repository-names $repo
        | from json
        | get scanningConfigurations
        | first
        | get scanOnPush
    )
    print $"Repository: ($repo), Scanning on push: ($scanOnPush)"
    if not $scanOnPush {
        print $"Repository ($repo) is not configured for scanning on push, enabling it now."
        aws ecr put-image-scanning-configuration --repository-name ($repo) --image-scanning-configuration scanOnPush=true
    }
}