From 53df7cd8f2f075d3594b3f633bfde494c4b57616 Mon Sep 17 00:00:00 2001 From: Meredith Lancaster Date: Mon, 18 Mar 2024 09:34:48 -0600 Subject: [PATCH] add comment about http client Signed-off-by: Meredith Lancaster --- pkg/cmd/attestation/artifact/oci/client.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkg/cmd/attestation/artifact/oci/client.go b/pkg/cmd/attestation/artifact/oci/client.go index 4b29e9e6d..d68fd99d2 100644 --- a/pkg/cmd/attestation/artifact/oci/client.go +++ b/pkg/cmd/attestation/artifact/oci/client.go @@ -59,6 +59,9 @@ func (c LiveClient) GetImageDigest(imgName string) (*v1.Hash, error) { return &desc.Digest, nil } +// Unlike other parts of this command set, we cannot pass a custom HTTP client +// to the go-containerregistry library. This means we have limited visibility +// into the HTTP requests being made to container registries. func NewLiveClient() *LiveClient { return &LiveClient{ parseReference: name.ParseReference,