GitLab

* Update tags related APIs

1. Remove API for listing tags of repository
2. Add API for listing tags of artifact
3. Support filter artifact by tag name
Signed-off-by: Wenkai Yin <yinw@vmware.com>

* [OCI] modify artifact tag name check
1. switch api get tag list
2. modify artifact tag name check
Signed-off-by: Yogi_Wang <yawang@vmware.com>
Co-authored-by: Yogi_Wang <yawang@vmware.com>

Fix container unhealth

fix(scan): dump nil slice of vulnerabilities as empty slice in report

Update the logic of copy artifact

Closes #11131
Signed-off-by: He Weiwei <hweiwei@vmware.com>

feat(scan): merge reports for image index

refactor: cleanup unused code about scan

health check url should depend on internal https
Signed-off-by: DQ <dengq@vmware.com>

1. Copy artifact will not return 409 anymore.
2. Make sure the tags of source artifact exist in the target artifact
Signed-off-by: Wenkai Yin <yinw@vmware.com>

1. Merge the scanning reports of referenced artifacts for image index.
2. Add artifact info for report.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Support replication between Harbor 2.0 and 1.x

Reenable token auth for cli

1. Cleanup unused code about clair.
2. Cleanup unused definitions in legacy_swagger.yaml about scan.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Add a seperated swagger file for chart API

fix(swagger): make json as default response

Add trace information into internal error

deprecate quota count on artifact

Fixes #11241

1, remove count quota from quota manager
2, remove count in DB scheme
3, remove UI relates on quota
4, update UT, API test and UI UT.
Signed-off-by: wang yan <wangyan@vmware.com>

Add a seperated swagger file for chart API as these APIs have no version
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Signed-off-by: He Weiwei <hweiwei@vmware.com>

jobservice may request via absolute path of url to harbor
Signed-off-by: DQ <dengq@vmware.com>

add localhost and 127.0.0.1 to SAN
Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: Daniel Jiang <jiangd@vmware.com>

Fixes #11374, fixes #11302, support replication between Harbor 2.0 and 1.x by providing versioning adapter
Signed-off-by: Wenkai Yin <yinw@vmware.com>

fix artifact dao UT issue

Fixes #10839
Add a StackTrace func in to Error, and log it when Harbor gets a internal
Signed-off-by: wang yan <wangyan@vmware.com>

1. Prevent the pull action when scan report status is not successfuly.
2. Bypass the checking when no vulnerabilities not found.
3. Improve the returned message when prevented the pull action.

Closes #11202
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Docker CLI fails if it's not logged in upon seeing "basic" realm challenging while pinging the "/v2" endpoint. (#11266)
Some CLI will send HEAD to artifact endpoint before pushing (#11188)(#11271)

To fix such problems, this commit re-introduce the token auth flow to the CLIs.

For a HEAD request to "/v2/xxx" with no "Authoirzation" header, the v2_auth middleware populates the
"Www-Authenticate" header to redirect it to token endpoint with proper
requested scope.

It also adds security context to based on the content of the JWT which has the claims of the registry.
So a request from CLI carrying a token signed by the "/service/token" will have proper permissions.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>

[Test Case] Add nightly case for CVE

Add notary remove part in notary_guide.md

1. add nightly case for cve
2. change translate words
Signed-off-by: Yogi_Wang <yawang@vmware.com>

* fix(scan): fix ScanStatus when merge NativeReportSummary

1. Running and success status is high priority when merge ScanStatus of
NativeReportSummary, otherwise chose the bigger status.
2. Merge scan logs of referenced artifacts when get the scan logs of
image index.

Closes #11265
Signed-off-by: He Weiwei <hweiwei@vmware.com>

* fix(portal): fix the annotation for the scan completed percent in scan overview
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Signed-off-by: danfengliu <danfengl@vmware.com>

fix(prepare): not accpet items of false value in external_redis

Item in yaml without value will be as None in python, which will make
the password of redis as `None` in `get_redis_configs`. This fix will
not accept items of `false value` in `external_redis` configurations.

Closes #11367
Signed-off-by: He Weiwei <hweiwei@vmware.com>

fix webhook slack test error

fix(log): correct file and line when use logger

Signed-off-by: peimingming <peimingming@corp.netease.com>

1. When use the helper functions of log pkg, the depth is 4 to get the
correct file and line.
2. Whe use the default logger of log pkg, the depth is 3 to get the
correct file and line.

Closes #11391
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Improve webhook UI according to the UX