GitLab

Signed-off-by: Yogi_Wang <yawang@vmware.com>

Update APIs to only accept encoded repository name that contains slash
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Remove "GetMyProjects" and "GetProjectRoles" in the interface "security.Context"

Fixes #11125, remove "GetMyProjects" and "GetProjectRoles" in the interface "security.Context"
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Add missiong entrypoint file for trivy-adapter

Signed-off-by: DQ <dengq@vmware.com>

Fix typo of spaces cause failure
Signed-off-by: DQ <dengq@vmware.com>

remove the chart handling in quota

Remove migrator flags in script

* Update tags related APIs

1. Remove API for listing tags of repository
2. Add API for listing tags of artifact
3. Support filter artifact by tag name
Signed-off-by: Wenkai Yin <yinw@vmware.com>

* [OCI] modify artifact tag name check
1. switch api get tag list
2. modify artifact tag name check
Signed-off-by: Yogi_Wang <yawang@vmware.com>
Co-authored-by: Yogi_Wang <yawang@vmware.com>

Fix container unhealth

1, remove the chartmuseum controller
2, doesn't handle chartrepo url in v2 middleware
Signed-off-by: wang yan <wangyan@vmware.com>

fix(scan): dump nil slice of vulnerabilities as empty slice in report

Because migrator tool removed
Signed-off-by: DQ <dengq@vmware.com>

Update the logic of copy artifact

Closes #11131
Signed-off-by: He Weiwei <hweiwei@vmware.com>

feat(scan): merge reports for image index

refactor: cleanup unused code about scan

health check url should depend on internal https
Signed-off-by: DQ <dengq@vmware.com>

1. Copy artifact will not return 409 anymore.
2. Make sure the tags of source artifact exist in the target artifact
Signed-off-by: Wenkai Yin <yinw@vmware.com>

1. Merge the scanning reports of referenced artifacts for image index.
2. Add artifact info for report.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Support replication between Harbor 2.0 and 1.x

Reenable token auth for cli

1. Cleanup unused code about clair.
2. Cleanup unused definitions in legacy_swagger.yaml about scan.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Add a seperated swagger file for chart API

fix(swagger): make json as default response

Add trace information into internal error

deprecate quota count on artifact

Fixes #11241

1, remove count quota from quota manager
2, remove count in DB scheme
3, remove UI relates on quota
4, update UT, API test and UI UT.
Signed-off-by: wang yan <wangyan@vmware.com>

Add a seperated swagger file for chart API as these APIs have no version
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Signed-off-by: He Weiwei <hweiwei@vmware.com>

jobservice may request via absolute path of url to harbor
Signed-off-by: DQ <dengq@vmware.com>

add localhost and 127.0.0.1 to SAN
Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: Daniel Jiang <jiangd@vmware.com>

Fixes #11374, fixes #11302, support replication between Harbor 2.0 and 1.x by providing versioning adapter
Signed-off-by: Wenkai Yin <yinw@vmware.com>

fix artifact dao UT issue

Fixes #10839
Add a StackTrace func in to Error, and log it when Harbor gets a internal
Signed-off-by: wang yan <wangyan@vmware.com>

1. Prevent the pull action when scan report status is not successfuly.
2. Bypass the checking when no vulnerabilities not found.
3. Improve the returned message when prevented the pull action.

Closes #11202
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Docker CLI fails if it's not logged in upon seeing "basic" realm challenging while pinging the "/v2" endpoint. (#11266)
Some CLI will send HEAD to artifact endpoint before pushing (#11188)(#11271)

To fix such problems, this commit re-introduce the token auth flow to the CLIs.

For a HEAD request to "/v2/xxx" with no "Authoirzation" header, the v2_auth middleware populates the
"Www-Authenticate" header to redirect it to token endpoint with proper
requested scope.

It also adds security context to based on the content of the JWT which has the claims of the registry.
So a request from CLI carrying a token signed by the "/service/token" will have proper permissions.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>

[Test Case] Add nightly case for CVE