feat: registry model mirrors upstream images into the Dataverket registry by digest #11

Merged

beddari merged 1 commit from registry-mirror into main

2026-09-18 05:00:06 +00:00

beddari commented

2026-09-17 20:43:33 +00:00

Owner

@dataverket/registry-mirror wraps the pinned crane: copy an upstream reference pinned by digest into registry.dataverket.org/mirror/<name>:<tag>, verify the digest after the copy, report unchanged when already there. Push credential from the vault on stdin into a throwaway DOCKER_CONFIG, never on the command line or on disk.

First use, already done: mirror/nats@sha256:004796a8… (2.15.0-alpine) for the Sentral dev fragment; verifies with an anonymous pull.

Protected paths changed: extensions/, models/. Human review required; no attestation tag, so validate-attestation fails by design.

`@dataverket/registry-mirror` wraps the pinned crane: copy an upstream reference pinned by digest into `registry.dataverket.org/mirror/<name>:<tag>`, verify the digest after the copy, report unchanged when already there. Push credential from the vault on stdin into a throwaway `DOCKER_CONFIG`, never on the command line or on disk. First use, already done: `mirror/nats@sha256:004796a8…` (2.15.0-alpine) for the Sentral dev fragment; verifies with an anonymous pull. Protected paths changed: `extensions/`, `models/`. Human review required; no attestation tag, so `validate-attestation` fails by design.

beddari added 1 commit

2026-09-17 20:43:33 +00:00

feat: registry model mirrors upstream images into the Dataverket registry by digest

validate-attestation / validate (pull_request) Failing after 2m46s

Details

e901a22e49

@dataverket/registry-mirror wraps the pinned crane: copy an upstream reference pinned by digest into
registry.dataverket.org/mirror/<name>:<tag>, verify the digest after the copy, and report unchanged when it is
already there. The push credential comes from the fabrikk vault on crane's stdin into a throwaway DOCKER_CONFIG,
never on the command line or on disk. First use: nats 2.15.0-alpine for the Sentral dev fragment.

beddari merged commit a84d9c9c37 into main

2026-09-18 05:00:06 +00:00

beddari deleted branch registry-mirror

2026-09-18 05:00:06 +00:00

beddari referenced this pull request from a commit

2026-09-18 05:00:08 +00:00

Merge pull request 'feat: registry model mirrors upstream images into the Dataverket registry by digest' (#11) from registry-mirror into main