Skip to content

Conversation

@colinmoynes
Copy link
Collaborator

  • Upstreams no longer impact querying
    • tags are now fetched from the Cloudsmith packages endpoint rather than Docker v2 tags/list
  • improved progress bar status information (more granular)

@colinmoynes colinmoynes self-assigned this Dec 17, 2025
Copilot AI review requested due to automatic review settings December 17, 2025 13:09
@colinmoynes colinmoynes merged commit 2802d6d into main Dec 17, 2025
1 check passed
@colinmoynes colinmoynes deleted the upstream-handling branch December 17, 2025 13:11
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request introduces two main enhancements to the Cloudsmith Docker Sleuth tool:

Purpose: The PR refactors the tag fetching mechanism to use the Cloudsmith packages API endpoint instead of the Docker v2 tags/list endpoint, which eliminates issues with upstream repositories affecting query results. Additionally, it improves the progress bar to provide more granular status information during image analysis.

Key Changes:

  • API Migration: Switched from Docker v2 /tags/list endpoint to Cloudsmith's /v1/packages/ API for fetching tags, which provides better filtering capabilities and avoids upstream interference
  • Progress Bar Enhancement: Added more detailed progress tracking with per-image task descriptions showing the number of tags being analyzed
  • Pagination Support: Implemented proper pagination handling using the Link header from the Cloudsmith API to ensure all packages are fetched

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants