at-container-registry
A container registry that uses the AT Protocol for manifest storage and S3 for blob storage. atcr.io
docker container atproto go
Star
Fork
Watch

Commits on main

evan.jarrett.net
deploy: add the Bunny middleware that tells the appview a HEAD was a HEAD
committed
evan.jarrett.net
make: mount the checkout with :z in build-trixie
committed
evan.jarrett.net
hold: say pull_zone only rewrites GET URLs, not HEAD
committed
byjp.me
appview: honour X-Original-Method to recover HEADs a CDN turned into GETs
committed
evan.jarrett.net
billing: show the billing panel to hold captains instead of "not enabled"
committed
evan.jarrett.net
seamark: add Seamark's own privacy policy, terms of service and security.txt
committed
evan.jarrett.net
appview: record agreement to the terms at sign-in, device approval and checkout
committed
evan.jarrett.net
appview: export and delete scan summaries and advisor suggestions with the account
committed
evan.jarrett.net
hold: require a login on getQuota and answer only for the caller's own DID
committed
evan.jarrett.net
testpds: model applyWrites deletes the way the reference PDS does
committed
evan.jarrett.net
appview: delete untagged manifests in applyWrites batches of 200
committed
evan.jarrett.net
hold: look up a manifest's layers among its owner's records, not the whole hold's
committed
evan.jarrett.net
appview: a missing OAuth scope is a 403, not a dead session (#30)
committed
evan.jarrett.net
tests: make the hold PDS carstore contention test deterministic
committed
evan.jarrett.net
tests: open the scan broadcaster test database the way production does, and run CI with the testmode tag
committed
evan.jarrett.net
tests: make the carstore lock tests deterministic, and silence slog in test binaries
committed
evan.jarrett.net
deploy: give the scanner its own server, and stop the tool from undoing production fixes on provision
committed
evan.jarrett.net
go mod tidy
committed
evan.jarrett.net
deploy: never install a template config during update, and poll every restarted service's health
committed
evan.jarrett.net
appview: stop serving service tokens past their expiry, and challenge the client when the hold rejects one
committed
evan.jarrett.net
deploy: snapshot binaries, configs, units and the appview database before every update
committed
evan.jarrett.net
docs: move presign memoization to the done list
committed
evan.jarrett.net
appview: memoize blob presigns within a request
committed
evan.jarrett.net
make: lint the integration packages with their build tags
committed
evan.jarrett.net
test: production-shaped push/pull benchmark with per-backend request counts
committed
evan.jarrett.net
appview: drop the testmode fall-back-to-default-hold probe
committed
evan.jarrett.net
deps: upgrade every module; gate loopback OAuth tests on testmode
committed
evan.jarrett.net
remove the runtime test_mode switch; the testmode build tag is the only one
committed
evan.jarrett.net
config: describe what test_mode still controls
committed
evan.jarrett.net
atproto: gate local indigo behavior behind a testmode build tag
committed
evan.jarrett.net
appview: mark repo cards translate="no"
committed
evan.jarrett.net
appview: name uploads with a UUID, not the nanosecond clock
committed
evan.jarrett.net
appview: never block a writer on budget for its second buffer
committed
evan.jarrett.net
appview: keep one part upload in flight while the next buffer fills
committed
evan.jarrett.net
docs: record the remaining performance findings
committed
evan.jarrett.net
appview: read the sailor profile from the local users row, not the PDS, per request
committed
evan.jarrett.net
appview: bound upload buffer memory, reap abandoned uploads, and pin the flush boundary
committed
evan.jarrett.net
appview: upload small blobs with one presigned PUT, and verify every digest
committed
evan.jarrett.net
hold: report blob size on read presigns so the appview can skip its S3 HEAD
committed
evan.jarrett.net
hold: look crew members up by rkey instead of walking the collection
committed
evan.jarrett.net
appview: share one HTTP transport across blob proxy requests
committed
evan.jarrett.net
hold/admin: bound the crew tab's identity lookups, and drop backend HTTP/2
committed
evan.jarrett.net
deploy: make appview billing opt-in, and verify what was built
committed
evan.jarrett.net
apply go fix modernizations across the workspace
committed
evan.jarrett.net
serve HTTP/2, and reach it through the load balancer
committed
evan.jarrett.net
scanner: reclaim scan directories a killed process left behind
committed
evan.jarrett.net
build: run every workspace module's tests, not just the root's
committed
evan.jarrett.net
scanner: report the Grype version that is actually linked in
committed
evan.jarrett.net
hold: gate presigned PUT behind write access, and validate blob identifiers
committed
evan.jarrett.net
scanner: bound a scan job, and lose the race to the hold on purpose
committed
evan.jarrett.net
hold: set busy_timeout on every pooled connection, not just the first
committed
evan.jarrett.net
hold/gc: time an orphaned record from when it was seen, not when it was written
committed
evan.jarrett.net
hold: reuse stored scan blobs when a rescan finds nothing new
committed
evan.jarrett.net
hold/scanner: detect dead connections and get storage off the reader
committed
evan.jarrett.net
scanner: name a scan by its manifest digest, not its temp directory
committed
evan.jarrett.net
docs: record why an all-negligible image is not rendered as clean
committed
evan.jarrett.net
docs: record which scanner findings were reviewed and accepted
committed
evan.jarrett.net
docs: record the scanner audit, its fixes and what is still open
committed
evan.jarrett.net
deploy: bound the scanner's memory and yield the box to the hold
committed
evan.jarrett.net
scanner: fix five crash and halt classes found by a pipeline audit
committed