Anso 591b06220b feat(registry): seal private-registry credentials for HTTP delivery (#1945) ...

* feat(registry): seal private-registry credentials for HTTP delivery

Pin each remote node's X25519 sealing key on first use and deliver sealed
auths so private-image Compose ops work without a confidential transport hop.

* fix(registry): avoid TOCTOU when loading the sealing key file

Read and exclusive-create the key without existsSync races so CodeQL
js/file-system-race no longer flags the seal helper or its unit test.

* fix(registry): read sealing key test fixture through one fd

Avoid a check-then-read race in the unit test that CodeQL still flagged
after the helper-side exclusive-create fix.

2026-09-19 16:07:36 -04:00

..

contact.mdx

fix: assorted UI/UX polish fixes (#1670)

2026-07-26 03:25:07 -04:00

security.mdx

feat(registry): seal private-registry credentials for HTTP delivery (#1945)

2026-09-19 16:07:36 -04:00

settings.mdx

feat(ui): add resizable sidebar and Anatomy pane (#1902)

2026-09-18 01:19:15 -04:00