mirror of
https://github.com/project-zot/zot.git
synced 2026-06-18 21:48:04 +08:00
e63faa889867832b5e016e3ece82255da0e8b393
The zap scanner started to check the csp header, which is causing a warning. We also need to ignore the rule, as both settings are read by the scanner. Per https://w3c.github.io/webappsec-csp/#example-7bb4ce67 we can have multiple Content-Security-Policy headers, and the most restrictive policies apply. This rule doesn't seem to be applied by zap. Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
chore(trivy): update trivy version and enforce OCI compliant repo names in local image storage (#1068)
zot

zot: a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire, that's it!
Docs
Documentation for zot is located at: https://zotregistry.io
Code of Conduct
Details are in the code of conduct
Description
Languages
Go
93.6%
Shell
5.8%
Makefile
0.4%