jfrog / build-info

Artifactory's open integration layer for CI build servers
https://www.buildinfo.org
Apache License 2.0
147 stars 156 forks source link

Replace docker extractor AQL with less restrictive REST API calls #785

Open MarkRx opened 7 months ago

MarkRx commented 7 months ago

The docker image extractor uses AQL. Depending on the Artifactory setup AQL may have tighter restrictions than other API endpoints. This could be replaced with a less restrictive API call such us using the list files endpoint.

AQL: items.find({"path":"mypath","repo":"myrepo"}).include("name","repo","path","actual_sha1","virtual_repos")

Describe the solution you'd like to see Use the file list API endpoint instead of an AQL search.

Describe alternatives you've considered Loosening restrictions on AQL access.

Additional context