mirror of
https://github.com/project-zot/zot.git
synced 2025-02-17 23:45:36 -05:00
zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specification)
The zap scanner started to check the csp header, which is causing a warning. We also need to ignore the rule, as both settings are read by the scanner. Per https://w3c.github.io/webappsec-csp/#example-7bb4ce67 we can have multiple Content-Security-Policy headers, and the most restrictive policies apply. This rule doesn't seem to be applied by zap. Signed-off-by: Andrei Aaron <aaaron@luxoft.com> |
||
---|---|---|
.github | ||
.zap | ||
build | ||
cmd | ||
demos | ||
docs | ||
errors | ||
examples | ||
pkg | ||
swagger | ||
test | ||
.gitignore | ||
CODE_OF_CONDUCT.md | ||
codecov.yml | ||
CODEOWNERS | ||
COMPARISON.md | ||
CONTRIBUTING.md | ||
go.mod | ||
go.sum | ||
golangcilint.yaml | ||
LICENSE | ||
MAINTAINERS.md | ||
Makefile | ||
NOTICE | ||
README.md | ||
README_fuzz.md | ||
SECURITY.md | ||
THIRD-PARTY-LICENSES.md | ||
tools.go | ||
zot.go |
zot

zot: a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire, that's it!
Docs
Documentation for zot
is located at: https://zotregistry.io
Code of Conduct
Details are in the code of conduct