google / google/go-containerregistry
Provide a way to force TLS
Open
lifecycle/frozen
- Dominant language
- Go
- Stars
- 4k
- Forks
- 686
- Avg merge
- 2d 12h
- Merged PRs (30d)
- 26
Description
See [here](https://github.com/tliron/reposure/blob/036d897807c16aed48402d19395329f2b264f556/client/direct/tls.go#L15).
We expose `name.Insecure` that allows for `http` traffic to any domain, but no way to turn off the [`http` fallback for localhost, etc.](https://github.com/google/go-containerregistry/blob/94913c02dcaa92b09b913585c1d26ba2eba1d946/pkg/name/registry.go#L79-L93)
cc @tliron @hasheddan
Contributor guide
Assessment
This issue has not been assessed yet.