zot/pkg/test at 7ceb01dcffe0f82467776fcb78abc3df5450a101 - zot

github/zot

mirror of https://github.com/project-zot/zot.git synced 2026-06-17 21:17:58 +08:00

Files

T

Bachir Khiati ba8575d960 feat(api): add repository quota enforcement middleware (#3923 )

Adds a configurable maximum repository count per registry instance.
When maxRepos is set on StorageConfig, manifest pushes that would create
a new repository beyond the limit are rejected with HTTP 429
TOOMANYREQUESTS. Pushes to existing repositories are always allowed.

Implemented as an always-available feature in pkg/api (not a build-tag
extension). MaxRepos is a field on StorageConfig, enabled when > 0.

- repoQuotaMiddleware on the dist-spec router intercepts manifest PUTs.
  New-repo pushes are serialized with a sync.Mutex to prevent concurrent
  requests from exceeding the limit.
- Adds CountRepos(ctx) to the MetaDB interface with efficient
  implementations: BoltDB (Stats().KeyN), Redis (HLen), DynamoDB
  (Scan with Select=COUNT).
- Config.IsQuotaEnabled() added, wired into controller.go metaDB init.
- Four integration tests (enforcement, concurrency, disabled,
  unconfigured) and backend-specific CountRepos tests for BoltDB, Redis,
  and DynamoDB.

Signed-off-by: Bachir Khiati <bachir.khiati@gmail.com>

2026-04-13 23:18:34 +03:00

auth

fix: CVE-2025-30204 - golang-jwt DoS vulnerability via excessive memory allocation (#3687 )

2026-01-14 11:34:58 +02:00

common

fix: address code review comments (#3942 )

2026-04-08 00:10:54 +03:00

image-utils

test: add tests for pushing manifests with non-canonical digests together with tags (#3920 )

2026-03-31 12:30:19 +03:00

inject

chore: update golangci-lint and fix all issues (#3575 )