Adding 'ecr:BatchGetImage' to the user permissions solved the issue. With a previous runner that was not required.