fix(security): verify internal runtime mirror digests

2026-07-14 16:54:28 +08:00
parent fd35fab9dc
commit 52b870824f
2 changed files with 20 additions and 1 deletions
--- a/scripts/security/runtime_image_mirror_controller.py
+++ b/scripts/security/runtime_image_mirror_controller.py
@@ -299,7 +299,13 @@ def _target_digest_ref(image: ImagePolicy) -> str:
 def _target_digest_present(image: ImagePolicy) -> bool:
    try:
        completed = subprocess.run(
-            ["docker", "manifest", "inspect", _target_digest_ref(image)],
+            [
+                "docker",
+                "manifest",
+                "inspect",
+                "--insecure",
+                _target_digest_ref(image),
+            ],
            check=False,
            stdout=subprocess.DEVNULL,
            stderr=subprocess.DEVNULL,