aws: use secrets

Signed-off-by: Andrea Luzzardi <aluzzardi@gmail.com>

stdlib/aws/ecr/ecr.cue

@@ -2,6 +2,7 @@ package ecr
 
 import (
 	"dagger.io/dagger"
+	"dagger.io/dagger/op"
 	"dagger.io/aws"
 )
 
@@ -15,14 +16,37 @@ import (
 	// ECR credentials
 	username: "AWS"
 
-	secret: out @dagger(output)
+	secret: {
+		@dagger(output)
+		string
 
-	aws.#Script & {
-		always:   true
-		"config": config
-		export:   "/out"
-		code: """
-			aws ecr get-login-password > /out
-			"""
+		#up: [
+			op.#Load & {
+				from: aws.#CLI & {
+					"config": config
+				}
+			},
+
+			op.#Exec & {
+				always: true
+
+				args: [
+					"/bin/bash",
+					"--noprofile",
+					"--norc",
+					"-eo",
+					"pipefail",
+					"-c",
+					#"""
+					aws ecr get-login-password > /out
+					"""#
+				]
+			},
+
+			op.#Export & {
+				source: "/out"
+				format: "string"
+			}
+		]
 	}
 }