Milos Gajdos

> What metrics would we use to determine if it affects contribution? This is a good question. I think right now the only guiding light we have is the number...

> To determine the existence of a manifest/blob, I attempted to issue a HEAD request using the following: You mention `HEAD` request but your examples show `GET` requests 🤔 I...

I am assuming you are talking about the `filesystem` storage driver? Keep in mind that's not the only storage driver supported by registry: I think it's reasonably safe to assume...

I've no idea what youre trying to achieve but please do not use in-memory image store. It's there for testing purposes only. As for the cache: that's used for caching...

There is no such thing as pull-through cache that has an S3 backing store or any other backing store for that matter. You either run full-blown registry service (with the...

I've tested this on AWS S3 and this works like charm. My suspicion is this is related to https://github.com/distribution/distribution/pull/3940

I haven't checked your logs and was responding from GH mobile app, hence my marking the comment I made as suspicion. Feel free to open a PR with a fix....

Yeah, I've no idea if these are legit or false positives. These warnings are about logging sensitive data -- I think we "hydrate" context with all kinds of garbage in...

> I suggest we go ahead and merge this. I'm wondering if we should mark these as false positives as they'll probably keep cropping up on all the subsequent PRs...

This is a question for https://github.com/moby/moby project I believe. CC: @thaJeztah My general suspicion is: docker daemon does not seem to be able to handle calls to private registry. I...