mindersec / minder / 41729152332

67%

push

github

feat(oci): redefine artifact identity as repo:tag, add oci/digest property (#7044)

Redefine OCI artifact identity as repo:tag, add oci/digest property

Switches DockerHub/Quay upstream_id from repo@digest to repo:tag, so
identity stays stable when a tag moves to a new digest. The previous
digest-bearing upstream_id changed on every refresh.

Adds oci/digest as a new entity property (following the oci/repository
pattern from #6929), carrying the digest the identity used to encode.

Adds a registration-time validator rejecting tagless artifact names
(e.g. bare alpine), since a tagless name and its tagged equivalent
(alpine:latest) would otherwise resolve to the same upstream_id. This
is forward-only: any already-registered tagless entity keeps working,
and in the rare case both a tagless and tagged form of the same image
are registered in one project, their upstream IDs can collide after
this ships (existing name-based fallback handles the lookup).

Part of #6978 (M2 Phase 1).

25 of 26 new or added lines in 5 files covered. (96.15%)

23853 of 35640 relevant lines covered (66.93%)

58.88 hits per line