stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
cf5b72974f923126944f4dcd47e85864ebb31a3b
git.stella-ops.org/docs/features/unchecked/scanner/oci-image-inspector-service.md

1.6 KiB
Raw Blame History

OCI Image Inspector Service (IOciImageInspector)

Module

Scanner

Status

IMPLEMENTED

Description

Service for inspecting OCI images including multi-arch manifest resolution, layer enumeration, platform detection, and digest extraction without pulling full image content.

Implementation Details

  • Image Inspector:
    • src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/IOciImageInspector.cs - IOciImageInspector interface for inspecting OCI images without pulling full content
    • src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/OciImageInspector.cs - OciImageInspector implementation supporting multi-arch manifest resolution, layer enumeration, platform detection, and digest extraction
  • Inspection Models:
    • src/Scanner/__Libraries/StellaOps.Scanner.Contracts/OciInspectionModels.cs - OciInspectionModels defining inspection result types (layers, platforms, digests)
  • DI Registration: src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/ServiceCollectionExtensions.cs

E2E Test Plan

  • Inspect a single-arch OCI image and verify layer enumeration returns correct layer digests and sizes
  • Inspect a multi-arch OCI image and verify platform detection identifies all available architectures (amd64, arm64, etc.)
  • Verify multi-arch manifest resolution selects the correct platform-specific manifest based on the runtime platform
  • Verify digest extraction returns the correct content-addressable digest for the image manifest
  • Verify inspection works without pulling full image content (manifest-only operation)
  • Verify inspection handles private registries with authentication