Expand description
Manifest and blob reads against an OCI registry.
Registries answer a blob GET with a redirect to their storage backend
(GHCR: 307 to pkg-containers.githubusercontent.com), so the blob read
follows a bounded chain of redirects itself — the shared client is built
without redirect following so the registry credential never travels to a
host the profile did not name. The redirected request is sent bare: the
target URL carries its own signed authorisation, and forwarding the
registry token to a CDN would leak it.
Copyright (c) systemprompt.io — Business Source License 1.1. See https://systemprompt.io for licensing details.