docker-socket-protector/profiles/diun at main · arrrgi/docker-socket-protector · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
# DIUN Docker Socket Access Profile
#
# This profile grants DIUN (Docker Image Update Notifier) minimal read-only access.
# Documentation: https://crazymax.dev/diun/
#
# - all access is restricted to GET and HEAD methods (read-only)
# - image access is limited to metadata queries only

# Method    Path

### Health check ###
HEAD        /_ping

### Docker version info ###
GET         /(v\d+\.\d+/)?version

### Filtered container list ###
GET         /(v\d+\.\d+/)?containers/json\?filters=.*status.*

### Image metadata (broad read-only) ###
GET         /(v\d+\.\d+/)?images(\?.*|/.*)?