spiegel_podman/pkg/machine/ocipull
Miloslav Trmač b2d08f5b8f Use UnparsedInstance.Manifest instead of ImageSource.GetManifest
... to validate that the manifests match expected digests, if any.

Do this everywhere, even where we read local storage which is
mostly trusted, because it is cheap enough and being consistent
makes it less likely for the code to be copied into other
contexts shere the sources are not trusted.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-02-28 20:14:11 +01:00
..
oci.go Allow podman machine to download from oci registry 2024-02-12 15:19:34 -06:00
ociartifact.go Use UnparsedInstance.Manifest instead of ImageSource.GetManifest 2025-02-28 20:14:11 +01:00
ociartifact_test.go Allow podman machine to download from oci registry 2024-02-12 15:19:34 -06:00
ocidir.go Bump Go module to v5 2024-02-08 09:35:39 -05:00
policy.go do not require policy.json 2024-03-13 09:07:51 -05:00
policy.json pkg/machine/ocipull: add default policy.json file 2024-02-27 15:29:59 +01:00
policy_unix.go pkg/machine/ocipull: add custom policy.json location 2024-02-27 15:29:58 +01:00
policy_windows.go pkg/machine/ocipull: add custom policy.json location 2024-02-27 15:29:58 +01:00
pull.go do not require policy.json 2024-03-13 09:07:51 -05:00
source.go Use UnparsedInstance.Manifest instead of ImageSource.GetManifest 2025-02-28 20:14:11 +01:00