Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Attempting to get a non-existent package from ghcr.io results in "authentication failure" #40

Open
lann opened this issue Jun 14, 2024 · 0 comments

Comments

@lann
Copy link
Collaborator

lann commented Jun 14, 2024

$ wkg get wasi:fake
No version specified; fetching version list...
Error: OCI error: Authentication failure: {"errors":[{"code":"DENIED","message":"requested access to the resource is denied"}]}


Caused by:
    Authentication failure: {"errors":[{"code":"DENIED","message":"requested access to the resource is denied"}]}

Options:

  • Find a way to distinguish between "not found" and (actual) "bad auth". This will require some research; I'm not confident that this is even possible with ghcr.io
  • Add an option to the well-known registry.json indicating "this OCI registry doesn't use auth, so treat auth failure as 'not found'"
  • Reword the error message to reflect the ambiguity, e.g. "Package not found or access denied"

Ref #37

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant