• v2.7.3 ff2aefeef4

    feat: add ban_tags_enabled/ban_tags to docker remotes to block named tags (#43)
    ci/woodpecker/tag/docker Pipeline was successful

    unkinben released this 2026-05-10 22:13:11 +10:00 | 37 commits to master since this release

    Adds two per-remote config keys for docker remotes:

    ban_tags_enabled: false # opt-in, default off
    ban_tags:
    - latest
    - edge

    When ban_tags_enabled is true and a manifest request arrives for a named
    tag in ban_tags, the proxy returns 403. sha256-addressed pulls are never
    blocked, so images already pulled can still be referenced by digest.
    Blob requests are unaffected.

    Reviewed-on: #43

    Downloads