mirror of
https://github.com/aykhans/my-self-host-services.git
synced 2026-08-29 02:14:34 +00:00
7 lines
507 B
YAML
7 lines
507 B
YAML
name: aykhans/whitelist-registry
|
|
description: "Prevent http-probing / http-generic-401-bf false positives from Docker/OCI registry traffic"
|
|
whitelist:
|
|
reason: "Docker/OCI registry v2 protocol is probe-like by design: unauthenticated /v2/ requests get 401 auth challenges and blob-existence checks get 404 before upload; real registry abuse is handled by Gitea's own auth"
|
|
expression:
|
|
- evt.Meta.service == 'http' and evt.Meta.target_fqdn == 'git.aykhans.me' and evt.Meta.http_path startsWith '/v2/'
|