What is the version or commit of the ORAS .NET library?
No response
What would you like to be added?
We need to parse OCI layout tarball files without extracting them as a whole to disk. We only want to extract&load the actually read layout files in-memory for security reasons.
Why is this needed for the ORAS .NET library?
So one can read OCI layout tarballs without the need to extract them as a whole. We don't want to do that for multiple reasons: security considerations of extracting user-provided tarballs, size considerations: we have customers with Windows ServerCore images that contain multi-GB of image size.
Are you willing to submit PRs to contribute to this feature?
What is the version or commit of the ORAS .NET library?
No response
What would you like to be added?
We need to parse OCI layout tarball files without extracting them as a whole to disk. We only want to extract&load the actually read layout files in-memory for security reasons.
Why is this needed for the ORAS .NET library?
So one can read OCI layout tarballs without the need to extract them as a whole. We don't want to do that for multiple reasons: security considerations of extracting user-provided tarballs, size considerations: we have customers with Windows ServerCore images that contain multi-GB of image size.
Are you willing to submit PRs to contribute to this feature?