blumeops/docs
Erich Blume b42660f881 Fold enforce-tag-immutability into harden-zot-registry
Tag immutability requires auth to be meaningful, so it can't be resolved
independently. Replace client-side push checks with server-side
accessControl policy: artifact-workloads group gets read+create (no
update/delete), enforcing immutability at the registry level.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 07:52:49 -08:00
..
changelog.d Adopt commit-based container tags (#232) 2026-02-20 22:56:20 -08:00
explanation Integrate Forgejo with Authentik OIDC (#228) 2026-02-20 17:39:50 -08:00
how-to Fold enforce-tag-immutability into harden-zot-registry 2026-02-21 07:52:49 -08:00
reference Add dagger to nix-container-builder runner (#234) 2026-02-20 23:09:01 -08:00
tutorials Adopt commit-based container tags (#232) 2026-02-20 22:56:20 -08:00
index.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
quartz.config.ts Move zk cards to docs/zk/ for documentation restructuring (#84) 2026-02-03 09:13:50 -08:00
quartz.layout.ts Move zk cards to docs/zk/ for documentation restructuring (#84) 2026-02-03 09:13:50 -08:00