Brian Goff 330cf7ae7d Fix ResolveImageConfig to evaluate source policy ...

Before this change, ResolveImageConfig was unaware of source policies.
This means that:

1. Images for denied sources may be resolved
2. Image configs may get pulled for sources that are later converted to
   a different image

The update makes it so the image resolver first runs a given ref through
the source policy and uses any mutated ref for the actual resolve
(instead of the original ref).
It also returns the mutated ref so it can be used correctly by the
frontend (e.g. don't want to do llb.Image(oldRef@resolvedDigest)).

Signed-off-by: Brian Goff <cpuguy83@gmail.com>

2023-07-10 17:44:50 +00:00

..

attestation.go

Revert "attestations: merge attestation refs into result refs map"

2022-12-12 14:22:00 +00:00

client.go

Fix ResolveImageConfig to evaluate source policy

2023-07-10 17:44:50 +00:00