Skip to content

Pull requests: google/go-containerregistry

New pull request New
70 Open 1,454 Closed
70 Open 1,454 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix: limit HTTP response body reads to prevent OOM
#2296 opened May 7, 2026 by evilgensec Contributor Loading…
remote: block SSRF via private-IP Location headers in blob uploads
#2295 opened May 7, 2026 by adilburaksen Loading…
Validate Windows layer paths before conversion
#2294 opened May 6, 2026 by SolsticeSpectrum Loading…
1
remote: validate foreign layer URLs to prevent SSRF (fixes #2259)
#2293 opened May 6, 2026 by evilgensec Contributor Loading…
transport: block redirects from token server to private/link-local addresses (SSRF fix)
#2292 opened May 6, 2026 by evilgensec Contributor Loading…
build(deps): bump the go-deps group across 1 directory with 2 updates dependencies go Pull requests that update Go code
#2290 opened May 6, 2026 by dependabot Bot Loading…
1
fix(mutate): preserve config blob and layers for non-Docker OCI artifacts
#2286 opened May 1, 2026 by blackwell-systems Contributor Loading…
1
9
pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract
#2279 opened Apr 25, 2026 by anishesg Loading…
1
4
remote: verify schema1 digest pulls by body hash
#2275 opened Apr 22, 2026 by 1seal • Draft
fix: handle missing DiffIDs in tarball Manifest() to prevent panic
#2263 opened Apr 13, 2026 by Yanhu007 Loading…
1
3
transport: bind bearer realm to registry domain
#2261 opened Apr 12, 2026 by 1seal Loading…
1
remote: validate foreign layer URLs to prevent SSRF
#2259 opened Apr 9, 2026 by AlexJohnWilcox Loading…
5 tasks done
2
remote: defensively validate referrers subject binding
#2210 opened Feb 13, 2026 by 1seal Loading…
use conditional requests for fallback referrers tag updates
#2209 opened Feb 12, 2026 by 1seal Loading…
3 tasks done
1
1
bound io.ReadAll on untrusted HTTP response bodies
#2208 opened Feb 12, 2026 by 1seal Loading…
4 tasks done
1
1
transport: validate bearer realm url
#2196 opened Jan 27, 2026 by 1seal Loading…
1
fix(mutate): close layer readers immediately after extracting layer
#2190 opened Jan 12, 2026 by caxu-rh Loading…
3
feat: flatten last n layers.
#2182 opened Dec 8, 2025 by lingdie Loading…
1
docs(README): add mise alternative method installation for crane
#2179 opened Dec 7, 2025 by jylenhof Loading…
pkg/registry: add callbacks on PUT and DELETE
#2178 opened Dec 2, 2025 by malt3 Contributor Loading…
pkg/registry: export RedirectError
#2177 opened Dec 2, 2025 by malt3 Contributor Loading…
pkg/registry: export ErrNotFound
#2176 opened Dec 2, 2025 by malt3 Contributor Loading…
3
fix: allow concurrent write to layout index
#2175 opened Dec 1, 2025 by cjc7373 Loading…
1
feat: Add MaybeTagStr method to Digest type
#2167 opened Nov 22, 2025 by jphelton Loading…
1
fix(ping): fix auto detect service scheme issue
#2166 opened Nov 21, 2025 by derekhjray Contributor Loading…
2
ProTip! Follow long discussions with comments:>50.