unkinben af28631a41 feat: add ban_tags_enabled/ban_tags to docker remotes to block named tags ...

Adds two per-remote config keys for docker remotes:

  ban_tags_enabled: false   # opt-in, default off
  ban_tags:
    - latest
    - edge

When ban_tags_enabled is true and a manifest request arrives for a named
tag in ban_tags, the proxy returns 403. sha256-addressed pulls are never
blocked, so images already pulled can still be referenced by digest.
Blob requests are unaffected.

2026-05-10 21:55:12 +10:00

..

__init__.py

feat: add test suite, tox, pre-commit, and ruff formatting

2026-04-25 19:21:05 +10:00

conftest.py

feat: add ban_tags_enabled/ban_tags to docker remotes to block named tags

2026-05-10 21:55:12 +10:00

test_cache.py

feat: quarantine new releases to prevent supply chain attacks

2026-04-28 23:01:52 +10:00

test_config.py

refactor: split config into remotes/virtuals/locals sections (#31)

2026-04-30 23:50:20 +10:00

test_docker_auth.py

tests: resolve all peer-review issues across test suite

2026-04-25 19:58:33 +10:00

test_routes.py

feat: add ban_tags_enabled/ban_tags to docker remotes to block named tags

2026-05-10 21:55:12 +10:00

test_storage.py

tests: resolve all peer-review issues across test suite

2026-04-25 19:58:33 +10:00

test_virtual.py

feat: cache parsed member indexes as msgpack to skip YAML re-parse on rebuild (#40)

2026-05-02 17:15:31 +10:00