7 Commits (4cc19d1d82c4f4ee4bb9af5739e1184f5800f588)

Author	SHA1	Message	Date
Peter Engelbert	f11e74ee57	Add unit test for man-in-the-middle attack on pull ... Add a unit test that proves the digest of the received content being checked. The check should ensure that the digest of the received content is identical to the digest provided by the manifest in the layers[0] descriptor. This check is currently implemented in containerd, so the unit test ensures security in the case a breaking change is made in containerd. Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>	4 years ago
Matt Butcher	16024dc19a	fix: add new static linter and fix issues it found (#7655) ... * fix: add new static linter and fix issues it found Signed-off-by: Matt Butcher <matt.butcher@microsoft.com> * fixed two additional linter errors. Signed-off-by: Matt Butcher <matt.butcher@microsoft.com>	5 years ago
Josh Dolitsky	7ce29e12fa	ref(go.mod): oras v0.8.1 (#6862) ... * ref(go.mod): oras v0.8.1 Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * update various module versions Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * upgrade oras v0.8.1 Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * upgrade to oras 0.8.1 release Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * lock to oras release (0.8.1) Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com>	5 years ago
Matt Farina	9bc7934f35	Updating the module for v3 as the major version ... Signed-off-by: Matt Farina <matt@mattfarina.com>	5 years ago
Josh Dolitsky	af06037d23	chore(registry): upgrade to oras v0.7.0 (#6285) ... Also: * add --insecure flag to "registry login" * fix bug parsing correct tag when port number present Signed-off-by: Josh Dolitsky <jdolitsky@gmail.com>	5 years ago
Josh Dolitsky	6095070817	ref(internal/experimental/registry): pkg refactor (#6205) ... No more magic separating the metadata from chart tarball - charts are pushed to registry as a single tarball layer with Chart.yaml in tact. No more fragile custom symlink chart storage, now following the OCI Image Layout Specification for chart filesystem cache. Also: - Update to ORAS 0.6.0 - Simplify registry client setup with NewClientWithDefaults() - Remove needless annotations and constants Fixes #6068 Fixes #6141 Signed-off-by: Josh Dolitsky <jdolitsky@gmail.com>	5 years ago
Matthew Fisher	fe952445bd	feat(cmd): put OCI commands behind a feature gate ... This adds a new `gates` package used for interacting with feature gates. It also marks the OCI registry work as experimental, signalling to users that it is not a stable feature of Helm. Signed-off-by: Matthew Fisher <matt.fisher@microsoft.com>	5 years ago