ECR images tags shouldn't be mutable. - tfsec
A static analysis security scanner for your Terraform code
aquasecurity.github.io