at-container-registry
A container registry that uses the AT Protocol for manifest storage and S3 for blob storage. atcr.io
docker container atproto go
Star
Fork
Watch

Commits on main

Evan Jarrett
testpds: model applyWrites deletes the way the reference PDS does
committed
Evan Jarrett
appview: delete untagged manifests in applyWrites batches of 200
committed
Evan Jarrett
hold: look up a manifest's layers among its owner's records, not the whole hold's
committed
Evan Jarrett
appview: a missing OAuth scope is a 403, not a dead session (#30)
committed
Evan Jarrett
tests: make the hold PDS carstore contention test deterministic
committed
Evan Jarrett
tests: open the scan broadcaster test database the way production does, and run CI with the testmode tag
committed
Evan Jarrett
tests: make the carstore lock tests deterministic, and silence slog in test binaries
committed
Evan Jarrett
deploy: give the scanner its own server, and stop the tool from undoing production fixes on provision
committed
Evan Jarrett
go mod tidy
committed
Evan Jarrett
deploy: never install a template config during update, and poll every restarted service's health
committed
Evan Jarrett
appview: stop serving service tokens past their expiry, and challenge the client when the hold rejects one
committed
Evan Jarrett
deploy: snapshot binaries, configs, units and the appview database before every update
committed
Evan Jarrett
docs: move presign memoization to the done list
committed
Evan Jarrett
appview: memoize blob presigns within a request
committed
Evan Jarrett
make: lint the integration packages with their build tags
committed
Evan Jarrett
test: production-shaped push/pull benchmark with per-backend request counts
committed
Evan Jarrett
appview: drop the testmode fall-back-to-default-hold probe
committed
Evan Jarrett
deps: upgrade every module; gate loopback OAuth tests on testmode
committed
Evan Jarrett
remove the runtime test_mode switch; the testmode build tag is the only one
committed
Evan Jarrett
config: describe what test_mode still controls
committed
Evan Jarrett
atproto: gate local indigo behavior behind a testmode build tag
committed
Evan Jarrett
appview: mark repo cards translate="no"
committed
Evan Jarrett
appview: name uploads with a UUID, not the nanosecond clock
committed
Evan Jarrett
appview: never block a writer on budget for its second buffer
committed
Evan Jarrett
appview: keep one part upload in flight while the next buffer fills
committed
Evan Jarrett
docs: record the remaining performance findings
committed
Evan Jarrett
appview: read the sailor profile from the local users row, not the PDS, per request
committed
Evan Jarrett
appview: bound upload buffer memory, reap abandoned uploads, and pin the flush boundary
committed
Evan Jarrett
appview: upload small blobs with one presigned PUT, and verify every digest
committed
Evan Jarrett
hold: report blob size on read presigns so the appview can skip its S3 HEAD
committed
Evan Jarrett
hold: look crew members up by rkey instead of walking the collection
committed
Evan Jarrett
appview: share one HTTP transport across blob proxy requests
committed
Evan Jarrett
hold/admin: bound the crew tab's identity lookups, and drop backend HTTP/2
committed
Evan Jarrett
deploy: make appview billing opt-in, and verify what was built
committed
Evan Jarrett
apply go fix modernizations across the workspace
committed
Evan Jarrett
serve HTTP/2, and reach it through the load balancer
committed
Evan Jarrett
scanner: reclaim scan directories a killed process left behind
committed
Evan Jarrett
build: run every workspace module's tests, not just the root's
committed
Evan Jarrett
scanner: report the Grype version that is actually linked in
committed
Evan Jarrett
hold: gate presigned PUT behind write access, and validate blob identifiers
committed
Evan Jarrett
scanner: bound a scan job, and lose the race to the hold on purpose
committed
Evan Jarrett
hold: set busy_timeout on every pooled connection, not just the first
committed
Evan Jarrett
hold/gc: time an orphaned record from when it was seen, not when it was written
committed
Evan Jarrett
hold: reuse stored scan blobs when a rescan finds nothing new
committed
Evan Jarrett
hold/scanner: detect dead connections and get storage off the reader
committed
Evan Jarrett
scanner: name a scan by its manifest digest, not its temp directory
committed
Evan Jarrett
docs: record why an all-negligible image is not rendered as clean
committed
Evan Jarrett
docs: record which scanner findings were reviewed and accepted
committed
Evan Jarrett
docs: record the scanner audit, its fixes and what is still open
committed
Evan Jarrett
deploy: bound the scanner's memory and yield the box to the hold
committed
Evan Jarrett
scanner: fix five crash and halt classes found by a pipeline audit
committed
Evan Jarrett
appview: warn about a deprecated chart on the tab people actually land on
committed
Evan Jarrett
appview: keep the port in the registry host printed to users
committed
Evan Jarrett
appview: run the hold purge on a worker pool, not the request context
committed
Evan Jarrett
hold: actually send subject, so the attestation scan guard can fire
committed
Evan Jarrett
appview: give the confirm modal an accessible name and a focus trap
committed
Evan Jarrett
appview: process daily stats, and drop the dead README branch fallback
committed
Evan Jarrett
docs: record how a hold falls off the relay and stays off
committed
Evan Jarrett
docs: design note for artifact type classification
committed
Evan Jarrett
appview: three small UI fixes, empty state, icon sizing, aria-selected
committed