aws-ecs-task-audit — catch the ECS task definition mistakes nobody reviews

A task definition is the one place where a container's whole security posture is declared, and it is the one place nobody reviews. This tool reads your ACTIVE task definitions and reports the structural mistakes that are all visible in the JSON and all invisible in the console: plaintext secrets, mutable image tags, missing logging and health checks, root users, impossible Fargate sizes, and task roles that are really the execution role.