Affected by GO-2026-5064 and 3 other vulnerabilities

GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

GO-2026-6791: containerd CRI plugin: Checkpoint restore bypasses destination security context in github.com/containerd/containerd

The highest tagged major version is v2.

registry

package

v1.7.36 Latest Latest Go to latest Published: Sep 24, 2026 License: Apache-2.0 Imports: 17 Imported by: 2

Details

This section is empty.

This section is empty.

This section is empty.

type CredentialHelper interface {
	GetCredentials(ctx context.Context, ref, host string) (Credentials, error)
}

From stream

type Credentials struct {
	Host     string
	Username string
	Secret   string
	Header   string
}

type OCIRegistry struct {
	// contains filtered or unexported fields
}

OCI

func NewOCIRegistry(ref string, headers http.Header, creds CredentialHelper) *OCIRegistry

Initialize with hosts, authorizer callback, and headers

func (r *OCIRegistry) Fetcher(ctx context.Context, ref string) (transfer.Fetcher, error)

func (r *OCIRegistry) Image() string

func (r *OCIRegistry) MarshalAny(ctx context.Context, sm streaming.StreamCreator) (typeurl.Any, error)

func (r *OCIRegistry) Pusher(ctx context.Context, desc ocispec.Descriptor) (transfer.Pusher, error)

func (r *OCIRegistry) Resolve(ctx context.Context) (name string, desc ocispec.Descriptor, err error)

func (r *OCIRegistry) String() string

func (r *OCIRegistry) UnmarshalAny(ctx context.Context, sm streaming.StreamGetter, a typeurl.Any) error