imageresolver

type DigestResolver interface {
	// Resolve resolves an image reference (tag or digest) to its manifest digest.
	// For tag-based refs, it checks the cache first, then queries the registry
	// via HTTP HEAD on cache miss. For digest-based refs (@sha256:...), it
	// extracts and returns the digest directly.
	// Use WithPullSecrets to provide registry credentials for private images.
	Resolve(ctx context.Context, imageRef string, opts ...ResolveOption) (string, error)

	// ResolveConfigDigest resolves an image reference to its config digest
	// (the "image ID" shown by docker inspect / docker images --no-trunc).
	// Unlike manifest digests, the config digest is stable across re-pushes
	// and across registries when the image layers are identical.
	// This requires fetching the manifest body (one GET), not just a HEAD.
	// Use WithPullSecrets to provide registry credentials for private images.
	ResolveConfigDigest(ctx context.Context, imageRef string, opts ...ResolveOption) (string, error)

	// DigestFromStatus extracts the digest from pod status fields and caches
	// the image→digest mapping for future Resolve calls. This is a pure
	// local operation with no network calls.
	//   image:   the image name as reported by kubelet (e.g. "registry/repo:tag")
	//   imageID: the imageID as reported by kubelet (e.g. "registry/repo@sha256:abc...")
	DigestFromStatus(image, imageID string) (string, error)
}

type ResolveOption func(*resolveOptions)

type Resolver struct {
	// contains filtered or unexported fields
}