<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
# Container Registry Security — API Reference

## Docker Registry HTTP API V2

```bash
GET /v2/                          # Check API version
GET /v2/_catalog                  # List repositories
GET /v2/REPO/tags/list            # List tags
GET /v2/REPO/manifests/TAG        # Get manifest
DELETE /v2/REPO/manifests/DIGEST  # Delete manifest
```

## skopeo Commands

```bash
skopeo inspect docker://REGISTRY/IMAGE:TAG
skopeo copy docker://SRC docker://DST
skopeo list-tags docker://REGISTRY/IMAGE
skopeo inspect --no-creds docker://REGISTRY/IMAGE:TAG
```

## crane Commands

```bash
crane ls REGISTRY/IMAGE
crane digest REGISTRY/IMAGE:TAG
crane manifest REGISTRY/IMAGE:TAG
crane validate --remote REGISTRY/IMAGE:TAG
```

## AWS ECR CLI

```bash
aws ecr describe-repositories
aws ecr get-repository-policy --repository-name REPO
aws ecr put-image-scanning-configuration --repository-name REPO --image-scanning-configuration scanOnPush=true
aws ecr describe-image-scan-findings --repository-name REPO --image-id imageTag=TAG
```

## Harbor API

```bash
GET /api/v2.0/projects
GET /api/v2.0/projects/PROJECT/members
GET /api/v2.0/projects/PROJECT/repositories/REPO/artifacts/TAG
PUT /api/v2.0/projects/PROJECT
```
