Update deprecated ghcr.io image reference to public.ecr.aws

[luisina-santos]

Summary

• README.md referenced this connector's image via ghcr.io/conductorone/baton-sentry:latest; container images are now published to public.ecr.aws/conductorone/baton-sentry:latest instead.
• Only this connector's own image reference was updated.
• Related audit: CXH-2418.

Test plan

• Verified public.ecr.aws/conductorone/baton-sentry:latest resolves (manifest exists) before opening this PR.
• Diff reviewed — only the image domain changed.

🤖 Generated with Claude Code

[github-actions]

Connector PR Review: Update deprecated ghcr.io image reference to public.ecr.aws

Blocking Issues: 0 | Suggestions: 1 | Threads Resolved: 0
Criteria: Criteria status: loaded .claude/skills/ci-review.md from trusted base b1edd7771f3b.
Review mode: full
View review run

Review Summary

Scanned the full PR diff for security and correctness: it is a single documentation line in README.md switching this connector's own image reference from ghcr.io/conductorone/baton-sentry:latest to public.ecr.aws/conductorone/baton-sentry:latest. No Go source, go.mod, go.sum, or config changed, so no connector, provisioning, pagination, or dependency criteria apply. The new registry matches what docs/connector.mdx:235 already documents for this connector, so docs and README are now consistent; no blocking issues found.

Security Issues

None found.

Correctness Issues

None found.

Suggestions

• README.md:26 — the second line of the same docker block still uses ghcr.io/conductorone/baton:latest for the baton CLI image. Out of this PR's stated scope (a different repo's image), but users copy both lines together, so it may be worth confirming whether that image also moved to public.ecr.aws. Confidence: low.

Prompt for AI agents

Verify each finding against the current code and only fix it if needed.

## Suggestions

In `README.md`:
- Around line 26: The docker quickstart block now mixes registries — line 25 uses
  `public.ecr.aws/conductorone/baton-sentry:latest` (updated by this PR) while line 26
  still uses `ghcr.io/conductorone/baton:latest` for the `baton` CLI image. Confirm
  whether the `baton` CLI image is also published to `public.ecr.aws/conductorone/baton`;
  if it is, update line 26 to `public.ecr.aws/conductorone/baton:latest` so both commands
  in the block point at the non-deprecated registry. If the CLI image is intentionally
  still on ghcr.io, leave it as-is.

[github-actions]

No blocking issues found.