Documentation
¶
Overview ¶
Package publicaccess verifies public registry visibility without consulting local OCI credentials.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func PublicationError ¶
PublicationError reports a verification failure without implying the upload was rolled back.
Types ¶
type Client ¶
type Client struct {
// contains filtered or unexported fields
}
Client verifies metadata and anonymously downloads complete OCI graphs.
func (*Client) RequirePublic ¶
RequirePublic checks GHCR package visibility for the standalone metadata check. The owner is derived from the repository; organization packages are supported.
func (*Client) Verify ¶
func (c *Client) Verify(ctx context.Context, repository, reference, expected string) (string, error)
Verify downloads and hashes every manifest, config, and layer using anonymous registry authentication. Expected pins the root digest when nonempty. No platform is selected or omitted.
type HTTPClient ¶
HTTPClient is the HTTP boundary for GitHub package metadata.
type Option ¶
type Option func(*Client)
Option configures public verification.
func WithGitHubToken ¶
WithGitHubToken supplies a token only for the GitHub metadata API.
func WithHTTPClient ¶
func WithHTTPClient(client HTTPClient) Option
WithHTTPClient supplies the metadata API client.
func WithTransport ¶
func WithTransport(value http.RoundTripper) Option
WithTransport supplies anonymous registry transport, including custom trust roots.
Source Files