github/zot

mirror of https://github.com/project-zot/zot.git synced 2026-06-17 12:58:02 +08:00

T

Asgeir Storesund Nilsen 708adf63d4 fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory allocation (#3687 )

* fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory
allocation

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* fix: linting

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* chore: update project-zot/mockoidc to remove golang-jwt v3

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* test: Add more tests for bearer tokens

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

* fix: Rewrite tests to remove MakeAuthTestServerLegacy

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

---------

Signed-off-by: Asgeir Nilsen <asgeir@twingine.no>

2026-01-14 11:34:58 +02:00

ci: fix nightly due to outdated kind (#3676 )

2026-01-12 10:14:23 -08:00

feat(ui): update zui version (#2162 )

2024-01-17 17:22:33 +02:00

chore: fix dependabot alerts (#3595 )

2025-11-26 11:21:36 +02:00

chore: Enable Go jsonv2 experiment and update the trivy dependency (v0.67.2) (#3572 )

2025-11-27 09:58:37 +02:00

feat(sync): use regclient for sync extension (#2903 )

2025-04-15 16:58:15 -07:00

swagger: rename 'docs/' to 'swagger/'

2021-10-21 13:46:14 -07:00

feat: add configurable mTLS identity extraction with fallback chain (#3640 )

2025-12-18 09:10:47 -08:00

ci: fix nightly due to outdated kind (#3676 )

2026-01-12 10:14:23 -08:00

fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory allocation (#3687 )

2026-01-14 11:34:58 +02:00

feat(events): add events extension (#3045 )

2025-05-02 12:30:06 -07:00

fix: migrate to Go module v2 for proper semantic versioning (#3462 )

2025-10-16 22:43:47 -07:00

fix: more logging for sync extension (#3656 )

2025-12-16 00:03:24 +02:00

.gitattributes

build(deps): bump all dependencies (#2532 )

2024-08-02 14:23:53 -07:00

.gitignore

fix: migrate from github.com/rs/zerolog to golang-native log/slog (#3405 )

2025-10-03 12:34:03 -07:00

.golangci.yaml

chore: fix dependabot alerts (#3660 )

2025-12-19 12:12:10 -08:00

CODE_OF_CONDUCT.md

doc: add a CODE_OF_CONDUCT.md

2020-12-15 11:20:45 -08:00

codecov.yml

refactor(metadb): improve UX by speeding up metadb serialize/deserialize (#1842 )

2023-10-30 13:06:04 -07:00

CODEOWNERS

docs: update maintainers and codeowners info (#3502 )

2025-10-31 12:47:10 -07:00

COMPARISON.md

move references to zotregistry.io and project-zot

2021-12-05 10:52:27 -08:00

CONTRIBUTING.md

build: fix container image targets (#1856 )

2023-10-04 09:12:56 -07:00

go.mod

fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory allocation (#3687 )

2026-01-14 11:34:58 +02:00

go.sum

fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory allocation (#3687 )

2026-01-14 11:34:58 +02:00

LICENSE

fix: license copyright update (#3167 )

2025-05-25 11:57:49 +03:00

MAINTAINERS.md

docs: update maintainers and codeowners info (#3502 )

2025-10-31 12:47:10 -07:00

Makefile

ci: fix nightly due to outdated kind (#3676 )

2026-01-12 10:14:23 -08:00

NOTICE

docs: fix copyright related info for cncf onboarding (#1117 )

2023-01-17 15:43:45 -08:00

README_fuzz.md

Add fuzz tests for storage_fs (#601 )

2022-07-27 20:37:55 +03:00

README.md

fix: migrate to Go module v2 for proper semantic versioning (#3462 )

2025-10-16 22:43:47 -07:00

SECURITY.md

chore: update support matrix

2024-03-14 09:43:42 -07:00

THIRD-PARTY-LICENSES.md

chore: fix dependabot alerts (#2645 )

2024-09-09 18:32:57 -07:00

tools.go

chore: update golangci-lint and fix all issues (#3575 )

2025-11-22 23:36:48 +02:00

zot.go

zot: initial commit

2019-06-21 15:29:19 -07:00

README.md

zot

zot: a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire, that's it!

Documentation for zot is located at: https://zotregistry.dev

Code of conduct details are here.

License