This adds conditional manifest digest verification.
If the manifest is download by reference and the registry provides a digest in the response they have to be the same. Additionally the calculated digest of the downloaded manifest has to match the requested one
TODO
[ ] handle differences in v2s1 and v2s2 when calculating the digest of the downloaded manifest
lucab
commented
5 years ago
This adds conditional manifest digest verification. If the manifest is download by reference and the registry provides a digest in the response they have to be the same. Additionally the calculated digest of the downloaded manifest has to match the requested one
TODO
Depends on #105.