ParseScope parses a scope as defined in the [Docker distribution spec]. For scopes that don't fit that syntax, it returns a Scope with the ResourceTy

Code returns the error code.

EntryForRegistry returns auth information for the given host. If there's no information available, it should return the zero ConfigEntry and nil.

String returns the string representation of the scope, as suitable for passing to the token refresh "scopes" attribute.

NewError returns a new error with the given code, message and detail.

mapScopes changes any auth scopes in the context so that they refer to the prefixed names rather than the originals.

PushBlob pushes a blob described by desc to the given repository, reading content from r. Only the desc.Digest and desc.Size fields are used. It retur

both returns the results from calling f on both registries concurrently.

PushManifest pushes a manifest with the given media type and contents. If tag is non-empty, the tag with that name will be pointed at the manifest. I

GetBlob returns the content of the blob with the given digest. The context also controls the lifetime of the returned BlobReader. Errors: - ErrNameUnk

ResolveTag returns the descriptor for a given tag. Only the MediaType, Digest and Size fields will be filled out. Errors: - ErrNameUnknown when the re

NewStdTransport returns an [http.RoundTripper] implementation that acquires authorization tokens using the flows implemented by the usual docker clien

newTargetServer returns the URL for a test target server that uses the targetGate parameter to gate requests to the /test endpoint: if targetGate retu

Referrers returns an iterator that can be used to iterate over all the manifests that have the given digest as their Subject. If artifactType is non-z

runNonFatal runs the given function within t but will not call Fatal on t even if Fatal is called on the t passed to f. It reports whether all checks

Contains reports whether s1 is a (non-strict) superset of s2.

GetBlobRange is like GetBlob but asks to get only the given range of bytes from the blob, starting at offset0, up to but not including offset1. If off

IsUnlimited reports whether s is unlimited in scope.

Repositories returns an iterator that can be used to iterate over all the repositories in the registry in lexical order. If startAfter is non-empty, t

GetTag returns the contents of the manifest with the given tag. The context also controls the lifetime of the returned BlobReader. Errors: - ErrNameUn

PushBlobChunkedResume resumes a previous push of a blob started with PushBlobChunked. The id should be the value returned from [BlobWriter.ID] from th

ResolveDigest returns the descriptor for a given blob. Only the MediaType, Digest and Size fields will be filled out. Errors: - ErrNameUnknown when th

ResolveManifest returns the descriptor for a given maniifest. Only the MediaType, Digest and Size fields will be filled out. Errors: - ErrNameUnknown

DeleteBlob deletes the blob with the given digest in the given repository.

DeleteManifest deletes the manifest with the given digest in the given repository.

DeleteTag deletes the manifest with the given tag in the given repository. TODO does this delete the tag only, or the manifest too?

Descriptor returns the descriptor for the blob.

GetManifest returns the contents of the manifest with the given digest. The context also controls the lifetime of the returned BlobReader. Errors: - E

Is makes it possible for users to write `if errors.Is(err, ociregistry.ErrBlobUnknown)` even when the error hasn't exactly wrapped that error.

PushBlobChunked starts to push a blob to the given repository. The returned [BlobWriter] can be used to stream the upload and resume on temporary erro

Tags returns an iterator that can be used to iterate over all the tags in the given repository in lexical order. If startAfter is non-empty, the tags

Write implements io.Writer by writing some data to the blob.

Compare returns -1, 0 or 1 depending on whether rs1 compares less than, equal, or greater than, rs2. In most to least precedence, the fields are comp

Error implements the [error] interface.

ID returns the opaque identifier for this writer. The returned value can be passed to PushBlobChunked to resume the write. It is only valid before Wri

MountBlob makes a blob with the given digest that's in fromRepo available in toRepo and returns its canonical descriptor. This avoids the need to pul

newAuthServer returns the URL for an auth server that uses auth to service authorization requests. If that returns a nil *httpError, the first return

Commit completes the blob writer process. The content is verified against the provided digest, and a canonical descriptor for it is returned.

Load loads the auth configuration from the first location it can find. It uses runner to run any external helper commands; if runner is nil, [ExecHelp

Union returns a scope consisting of all the resource scopes from both s1 and s2. If the result is the same as s1, its string representation will also

NewScope returns a Scope value that holds the set of everything in rss.

Size returns the number of bytes written to this blob.

doRequest performs the given OCI request, sending it with the given body (which may be nil).

PushContent pushes all the content in rc to r. It returns a map mapping repository name to the descriptors describing the content that has actually b

NewWithConfig returns a new in-memory [ociregistry.Interface] implementation using the given configuration. If cfg is nil, it's treated the same as a

descriptorFromResponse tries to form a descriptor from an HTTP response, filling in the Digest field using knownDigest if it's not present. Note: thi

ChunkSize returns the maximum number of bytes to upload at a single time. This number must meet the minimum given by the registry and should otherwise

Iter returns an iterator over all the individual scopes that are part of s. The items will be produced according to [Scope.Compare] ordering. The unl

Len returns the number of ResourceScopes in the scope set. It panics if the scope is unlimited.

New returns a registry implementation that uses the OCI HTTP API. A nil opts parameter is equivalent to a pointer to zero Options. The host specifies

StatusCode returns the HTTP status code of the response.

UnlimitedScope returns a scope that contains all other scopes. This is not representable in the docker scope syntax, but it's useful to represent the

AccessChecker returns a wrapper for r that invokes check to check access before calling an underlying method. Only if check succeeds will the underlyi

CheckDescriptor checks that the given descriptor matches the given data or, if data is nil, that the descriptor looks sane.

ContextWithScope returns ctx annotated with the given scope. When the ociauth transport receives a request with a scope in the context, it will treat

IsEmpty reports whether the scope holds the empty set.