Brandon Mitchell
Brandon Mitchell
Some tools require a mediaType for storing/transferring content like SLSA attestations. It would be useful if SLSA had a mediaType, either based on a registered domain, or ideally registered with...
**Description** Running `make help` installs swagger, performs several swagger generate commands, and then fails. **Version** Current main branch. **Current Output** ``` $ make help cd hack/tools; go build -trimpath -tags=tools...
**Describe the bug** The scan for signatures requires that the metadata is packaged with a specific filename in the release artifacts. However this check does not inspect the contents of...
Registries must still support the n=100 and last query parameters. Clients may use the Link header. When registries cannot return all requested tags, an error must be returned. Fixes #461.
I'm nominating @rchincha as a maintainer. He's been instrumental in the 1.1.0 release, including contributions to the conformance tests and a key contributor to the Zot registry we use for...
This adds an optional header that servers can use to inform clients about the lack of a referrers listing for a given manifest, enabling clients to skip some requests. Related...
We need to be sure to update the website after we push releases. This adds the step to our release process. It also cleaned up linting issues in the doc.
Should distribution-spec enable the security reports feature recently launched by GitHub? I'm leaning towards yes, but wanted to get some buy in before clicking the button. https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository
**Do no merge** - Pending https://github.com/opencontainers/distribution-spec/pull/463. - Tests need to be added and are pending a shared mock registry setup. ### Fixes issue ### Describe the change Add support for...
This adds the conformance results for olareg. Details about the project can be found at https://github.com/olareg/olareg. This is the first entry in the v1.1 directory, so we should be sure...