2 ms·
I almost mentioned the auth thing but left it out as a bit of an implementation detail. It would not be difficult to map from a digest to a list of repositorie
by jacques_chester 6y ago
I almost mentioned the auth thing but left it out as a bit of an implementation detail.
It would not be difficult to map from a digest to a list of repositories.
- justincormack 6y agoThats a information disclosure potentially.
- jacques_chester 6y agoI disagree. You can still apply rules to repo/image and have those descend to blobs, just as happens now. If you ask for a blob and have access to repo/image with that blob, you see it. Otherwise not.