Ramkumar Chinchani

image admission: block uploading images to zot if signature verification fails

3

zot is cosign-compatible [1]. However zot is only a transit point for images (accept all images) and signing and verification is left to pushers and pullers. Can we setup zot...

ui: add a freeform "search" api (with boltdb support)

3

**Is your feature request related to a problem? Please describe.** Currently, we have graphQL APIs for very specific use cases. We need a "freeform" search API which does the following:...

storage: root directory directly on cloud storage

2

**Is your feature request related to a problem? Please describe.** If we want to support a stateless zot (helps for clustering) but also support dedupe, then we cannot have anything...

define contract for external service integrations

3

**Is your feature request related to a problem? Please describe.** Currently, zot inlines useful services/extensions but some services may have their own custom h/w requirements or need to scale differently....

ui: add a new API to store and retrieve user-specific metadata such as favorites

2

**Is your feature request related to a problem? Please describe.** zot UI intends to store and retrieve user-specific metadata such as favorites, stars, etc for repos and images. **Describe the...

Currently, zot has trivy support to scan container images. Can we integrate with clamav?

ci/cd: fuzz testing

1

**Is your feature request related to a problem? Please describe.** Add fuzz-testing support **Describe the solution you'd like** Support was recently added to docker distribution. We can use that as...

initial draft for a task scheduler

4

Signed-off-by: Ramkumar Chinchani **What type of PR is this?** **Which issue does this PR fix**: **What does this PR do / Why do we need it**: **If an issue #...

proposal: design and implement command-and-control federation

1

**Is your feature request related to a problem? Please describe.** Given a central command and control (CnC) OCI dist-spec registry, one or more zot instances can connect to this central...

**Is your feature request related to a problem? Please describe.** `zot` invokes "notation" directly in UTs. https://github.com/project-zot/zot/blob/main/pkg/api/controller_test.go#L3457 We can test/assert individual steps. **Describe the solution you'd like** Instead, can we...