c7e4cd1032
* fix(data/docker-client): allow some more OCI clients through Signed-off-by: Xe Iaso <me@xeiaso.net> * Update metadata check-spelling run (pull_request) for Xe/more-docker-client-programs Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com> on-behalf-of: @check-spelling <check-spelling-bot@check-spelling.dev> * fix(data/docker-client): add containerd Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com>
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
- name: allow-docker-client
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- path.startsWith("/v2/")
|
|
- userAgent.contains("docker/")
|
|
- userAgent.contains("git-commit/")
|
|
- '"Accept" in headers'
|
|
- headers["Accept"].contains("vnd.docker.distribution")
|
|
- '"Baggage" in headers'
|
|
- headers["Baggage"].contains("trigger")
|
|
|
|
- name: allow-crane-client
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- userAgent.contains("crane/")
|
|
- userAgent.contains("go-containerregistry/")
|
|
|
|
- name: allow-docker-distribution-api-client
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- '"Docker-Distribution-Api-Version" in headers'
|
|
- '!(userAgent.contains("Mozilla"))'
|
|
|
|
- name: allow-go-containerregistry-client
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- path.startsWith("/v2/")
|
|
- userAgent.contains("go-containerregistry/")
|
|
|
|
- name: allow-buildah
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- path.startsWith("/v2/")
|
|
- userAgent.contains("Buildah/")
|
|
|
|
- name: allow-podman
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- path.startsWith("/v2/")
|
|
- userAgent.contains("containers/")
|
|
|
|
- name: allow-containerd
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- path.startsWith("/v2/")
|
|
- userAgent.contains("containerd/")
|