mirror of
https://github.com/getnora-io/nora.git
synced 2026-04-12 20:50:31 +00:00
devitway
c1f6430aa9
- Verify blob digest (SHA256) on upload, reject mismatches (DIGEST_INVALID) - Reject sha512 digests (only sha256 supported) - Add upload session limits: max 100 concurrent, 2GB per session, 30min TTL - Bind upload sessions to repository name (prevent session fixation) - Filter .meta.json from Docker tag list (fix ArgoCD Image Updater recursion) - Fix catalog to show namespaced images (library/alpine instead of library) - Add security headers: CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy - Run containers as non-root user (USER nora) in all 3 Dockerfiles - Add configurable NORA_MAX_UPLOAD_SESSIONS and NORA_MAX_UPLOAD_SESSION_SIZE_MB
57 lines
1.4 KiB
TOML
57 lines
1.4 KiB
TOML
[package]
|
|
name = "nora-registry"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
authors.workspace = true
|
|
repository.workspace = true
|
|
homepage.workspace = true
|
|
description = "Cloud-Native Artifact Registry - Fast, lightweight, multi-protocol"
|
|
keywords = ["registry", "docker", "artifacts", "cloud-native", "devops"]
|
|
categories = ["command-line-utilities", "development-tools", "web-programming"]
|
|
|
|
[lib]
|
|
name = "nora_registry"
|
|
path = "src/lib.rs"
|
|
|
|
[[bin]]
|
|
name = "nora"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
tokio.workspace = true
|
|
axum.workspace = true
|
|
serde.workspace = true
|
|
serde_json.workspace = true
|
|
tracing.workspace = true
|
|
tracing-subscriber.workspace = true
|
|
reqwest.workspace = true
|
|
sha2.workspace = true
|
|
async-trait.workspace = true
|
|
hmac.workspace = true
|
|
hex.workspace = true
|
|
toml = "1.0"
|
|
uuid = { version = "1", features = ["v4"] }
|
|
bcrypt = "0.19"
|
|
base64 = "0.22"
|
|
prometheus = "0.14"
|
|
lazy_static = "1.5"
|
|
httpdate = "1"
|
|
utoipa = { version = "5", features = ["axum_extras"] }
|
|
utoipa-swagger-ui = { version = "9", features = ["axum", "reqwest"] }
|
|
clap = { version = "4", features = ["derive"] }
|
|
tar = "0.4"
|
|
flate2 = "1.1"
|
|
indicatif = "0.18"
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
thiserror = "2"
|
|
tower_governor = "0.8"
|
|
governor = "0.10"
|
|
parking_lot = "0.12"
|
|
zeroize = { version = "1.8", features = ["derive"] }
|
|
tower-http = { version = "0.6", features = ["set-header"] }
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
wiremock = "0.6"
|