ecr:GetAuthorizationToken

     {
       Sid    = "AllowGetAuthorizationToken"
       Effect = "Allow"
       Action = [
         "ecr:GetAuthorizationToken"
       ]
       Resource = "*"
       Condition = {
         StringLike = {
           "token.actions.githubusercontent.com:sub" = "repo:your-repo-name/*"
         }
       }
     },

See also

• ecr:, ecr:GetAuthorizationToken, ecr:BatchGetImage, ecr:CompleteLayerUpload
• ECR, aws ecr, public.ecr.aws, Terraform AWS ECR, Troubleshooting ECR, ecr:, ecr:ReplicateImage, ECR scanning