Milos Gajdos

Closing, fixed by https://github.com/distribution/distribution-library-image/pull/180

@qnt-dmitry mind rebasing this?

Thanks for the PR! Just to give you a heads up, it's very unlikely this will snuck in into the v3 stable release (no plan on ETA) due to the...

Maybe some other OSS implementation provider referrer API implementation but it's not currently planned in upstream. First we want to make a stable release and then discuss what next if...

This is failing CI

Without reproduction this is very hard to investigate, I'm afraid. Besides, I'd strongly encourage you to stop using `v.2x` release. It hasn't sen any bug fixes or updates for years...

> Based on the source code, I believe the implementation of PutContent could lead to empty manifest and link files Look, everything can fail, but you should hopefully see something...

I've no idea why `buysbox` vulnerabilities are reported by the scanner you've used, but I suspect the scanner is somehow comically broken because this image is built off `alpine`: https://github.com/distribution/distribution-library-image/blob/a943e89c3efe06134cd9a4b439203c5341082cbc/Dockerfile#L1...

Closing, fixed by https://github.com/distribution/distribution-library-image/pull/180

I dont know if this issue is fixed in the latest release, but please don't use `v2`: it hasnt got any updates for years, neither will it get any.