Erich Blume
0e2c10176d
## Summary - Enable OIDC + API key authentication on zot with anonymous pull preserved - Enforce tag immutability for version tags - Adopt commit-SHA-based container image tagging Details in the [[harden-zot-registry]] Mikado chain (`mise run docs-mikado harden-zot-registry`). ## Test plan - [ ] Anonymous pull still works - [ ] Unauthenticated push fails (401) - [ ] CI container builds pass with new auth and tagging - [ ] `mise run services-check` passes 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/231 |
||
|---|---|---|
| .. | ||
| add-container-version-sync-check.md | ||
| add-dagger-nix-build.md | ||
| adopt-commit-based-container-tags.md | ||
| enforce-tag-immutability.md | ||
| fix-ntfy-nix-version.md | ||
| harden-zot-registry.md | ||
| pin-container-versions.md | ||
| register-zot-oidc-client.md | ||
| wire-ci-registry-auth.md | ||