unkin/artifactapi
2
0
Fork 0
Code Issues 5 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

feat: enforce include_patterns on docker /v2/ proxy route #10

Merged
unkinben merged 1 commits from benvin/docker-include-patterns into master 2026-04-25 18:14:50 +10:00
Conversation 0 Commits 1 Files Changed 1
+9
unkinben commented 2026-04-25 18:14:46 +10:00
Owner
Copy Link
Copy Source

Adds pattern checking to docker_v2_proxy before any upstream fetch.
Patterns match against the full path and the image name (first two
path segments), bypassing the index-file exemption that check_artifact_patterns
applies — so restrictions apply equally to manifests, blobs, and tag lists.
Returns 403 when no pattern matches, consistent with the non-docker route.

Adds pattern checking to docker_v2_proxy before any upstream fetch. Patterns match against the full path and the image name (first two path segments), bypassing the index-file exemption that check_artifact_patterns applies — so restrictions apply equally to manifests, blobs, and tag lists. Returns 403 when no pattern matches, consistent with the non-docker route.
unkinben added 1 commit 2026-04-25 18:14:46 +10:00
feat: enforce include_patterns on docker /v2/ proxy route 869a1f8c02 
Adds pattern checking to docker_v2_proxy before any upstream fetch.
Patterns match against the full path and the image name (first two
path segments), bypassing the index-file exemption that check_artifact_patterns
applies — so restrictions apply equally to manifests, blobs, and tag lists.
Returns 403 when no pattern matches, consistent with the non-docker route.
unkinben merged commit 7930023de8 into master 2026-04-25 18:14:50 +10:00
unkinben deleted branch benvin/docker-include-patterns 2026-04-25 18:14:50 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/artifactapi#10
Delete Branch "benvin/docker-include-patterns"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?