find tasks that aren't using AWS ECR

find_tasks.sh

#!/bin/bash
set -e
set -o pipefail
#set -x

ACCOUNT=prod

arns=$(aws-vault exec "$ACCOUNT" -- aws ecs list-task-definitions | jq -r '.taskDefinitionArns | join("\n")')
families=$(echo "$arns" | awk -F '/' '{print $2}' | awk -F ':' '{print $1}' | sed '/^[[:space:]]*$/d' | sort | uniq)
for family in $families; do
  images=$(aws-vault exec "$ACCOUNT" -- aws ecs describe-task-definition --task-definition "$family" | jq -r '.taskDefinition.containerDefinitions | map(.image) | join("\n")')
  if echo "$images" | grep -qv 'dkr.ecr'; then
    echo "FAIL $family"
  else
    echo "PASS $family"
  fi
  sleep 1
done