feat: scope registry access for native Linux delivery #37
Loading…
Reference in a new issue
No description provided.
Delete branch "feat/linux-native-registry-access"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Adds isolated candidate and publisher credentials for native Linux image delivery. The admission identity writes only quarantine/linux/**; the trusted publisher can promote only seanfarm/linux-kernel and seanfarm/linux-bootc. No new delete or wildcard write authority.