mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-12 19:32:48 -06:00
83b1614c94
This change migrates the ORAS Go library from v1.2.2 to v2. The OCI downloader which uses this lib was updated as per the new API changes in the library. The v1.2.2 of the ORAS library had a dependency on the docker package. The library used a version of that package that had some reported vulnerabilities such as CVE-2022-41716, CVE-2022-41720. The ORAS Go library v2 removes the dependency on the docker package. Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>