Files
releases/download
Ashutosh Narkar 83b1614c94 Migrate ORAS Go library from v1.2.2 to v2
This change migrates the ORAS Go library from v1.2.2 to v2.
The OCI downloader which uses this lib was updated as per
the new API changes in the library.

The v1.2.2 of the ORAS library had a dependency on the docker package.
The library used a version of that package that had some
reported vulnerabilities such as CVE-2022-41716, CVE-2022-41720.

The ORAS Go library v2 removes the dependency on the docker package.

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
2023-02-23 23:24:45 -08:00
..
2022-01-29 13:28:54 -08:00