Run Zot registry guards with Bash and jq

sean commented

2026-09-10 22:12:48 +00:00

Owner

Replace eight Python guard paths with Bash and shared jq checks. Preserve the existing registry rollout, grants, storage, secretless configuration, node-image and cleanup contracts, including the latest warm-image toleration equality rule. Repair intended grant checks whose shell pipelines previously ignored disallowed values.

Validation: all repository guards pass with Python blocked, including 19 existing negative controls and 128 batched jq cases. The new grant and toleration controls were checked red then green. ShellCheck, shell syntax and diff checks pass. No runtime manifests change.

Replace eight Python guard paths with Bash and shared jq checks. Preserve the existing registry rollout, grants, storage, secretless configuration, node-image and cleanup contracts, including the latest warm-image toleration equality rule. Repair intended grant checks whose shell pipelines previously ignored disallowed values. Validation: all repository guards pass with Python blocked, including 19 existing negative controls and 128 batched jq cases. The new grant and toleration controls were checked red then green. ShellCheck, shell syntax and diff checks pass. No runtime manifests change.

sean added 1 commit

2026-09-10 22:12:49 +00:00