Skip to main content
emisar

zot OCI registry

v0.1.4

Read-only inspection of a zot OCI registry over its HTTP API: the OCI distribution endpoints (version check, catalog, tags, manifests) plus the zot extensions — registry config/health (mgmt), Prometheus metrics, and a GraphQL search query that returns per-repo size and a newest-image vulnerability summary. Optional basic-auth credentials are streamed over curl stdin; many zot deployments allow anonymous read.

7 allowed by default
Pack ID
zot
Vendor
emisar
OS
linux
Actions
7
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
curl

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host 
sudo emisar pack install zot --hash sha256:59facd2631b177a088707bc5be12f3e74a024fb54b29cc4c15913982b767dc7e

Actions 7 total

View on GitHub
  • zot.catalog script low

    GET /v2/_catalog

    Lists the repositories in the registry. Large registries paginate via the ?n=<count>&last=<repo> query parameters; this returns the first page. Use to inventory what is stored. Read-only.

    View source on GitHub
  • zot.manifest script low

    GET /v2/{repo}/manifests/{reference}

    Reads the image manifest for a repository at a given reference (a tag or a digest). Returns the layer/config descriptors and annotations for that image. Read-only.

    View source on GitHub
  • zot.metrics script low

    GET /metrics

    Show Prometheus-format metrics for the registry via the zot metrics extension — request counts, storage, and runtime gauges. Requires the full (extended) build with the metrics extension enabled in config, and typically auth (set ZOT_BASICAUTH). Read-only.

    View source on GitHub
  • zot.mgmt script low

    GET /v2/_zot/ext/mgmt

    Show registry configuration and health via the zot mgmt extension — the active config (extensions enabled, storage settings) and a health summary. The mgmt extension is on by default in the full build but requires auth and is denied to anonymous clients, so set ZOT_BASICAUTH. Read-only.

    View source on GitHub
  • zot.search script low

    POST /v2/_zot/ext/search (repo inventory + vuln summary)

    List repository inventory with per-repo storage size and a newest-image vulnerability summary, via the zot search GraphQL extension. This is how you get per-repo storage size + CVE summary — zot has no plain storage-usage endpoint, and garbage collection is not inspectable over HTTP. The GraphQL query is read-only (a RepoListWithNewestImage read). Read-only.

    View source on GitHub
  • zot.tags script low

    GET /v2/{repo}/tags/list

    Lists the tags available for a single repository. Use after the catalog to see which versions of an image are published. Read-only.

    View source on GitHub
  • zot.v2_base script low

    GET /v2/

    Check the OCI distribution base endpoint. A 200 confirms the registry is up and speaking the v2 API, and the response advertises the supported distribution-spec version. Use as a reachability/version check.

    View source on GitHub
← Back to registry
Pack reference Publish your own →