Tosone
b6effe29ef
Update the AWS S3 storage dependency chain, golang.org/x/net and the web frontend routing/icon packages to their latest patch releases, picking up the upstream bug fixes for the S3 client used by the storage backend, the HTTP/2 stack, and the router/icon bundles shipped in the web UI. Go direct upgrades: - github.com/aws/aws-sdk-go-v2 v1.47.4 -> v1.47.5 - github.com/aws/aws-sdk-go-v2/config v1.33.11 -> v1.33.12 - github.com/aws/aws-sdk-go-v2/service/s3 v1.114.5 -> v1.114.6 - github.com/aws/smithy-go v1.28.6 -> v1.28.7 - golang.org/x/net v0.61.0 -> v0.62.0 Go transitive bumps pulled in by the SDK release: - aws-sdk-go-v2/credentials v1.20.11 -> v1.20.12 - aws-sdk-go-v2/feature/ec2/imds v1.20.4 -> v1.20.5 - aws-sdk-go-v2/aws/protocol/eventstream v1.7.24 -> v1.7.25 - aws-sdk-go-v2/internal/configsources v1.5.7 -> v1.5.8 - aws-sdk-go-v2/internal/endpoints/v2 v2.8.7 -> v2.8.8 - aws-sdk-go-v2/internal/v4a v1.5.7 -> v1.5.8 - aws-sdk-go-v2/service/internal/accept-encoding v1.13.22 -> v1.13.23 - aws-sdk-go-v2/service/internal/checksum v1.11.8 -> v1.11.9 - aws-sdk-go-v2/service/internal/presigned-url v1.14.7 -> v1.14.8 - aws-sdk-go-v2/service/internal/s3shared v1.20.7 -> v1.20.8 - aws-sdk-go-v2/service/signin v1.11.0 -> v1.12.0 - aws-sdk-go-v2/service/sso v1.38.5 -> v1.39.0 - aws-sdk-go-v2/service/ssooidc v1.43.5 -> v1.44.0 - aws-sdk-go-v2/service/sts v1.51.5 -> v1.51.6 Web upgrades: - lucide-react ^1.62.0 -> ^1.63.0 - react-router-dom ^7.18.4 -> ^7.18.5 Verification: - go mod tidy - go build -tags "netgo,timetzdata,exclude_graphdriver_btrfs,containers_image_openpgp" ./... - go vet -tags "netgo,timetzdata,exclude_graphdriver_btrfs,containers_image_openpgp" ./... - bun run lint (web) - bun run build (web)
sigma
Sigma is an image registry that is extremely easy to deploy and maintain, and it adheres to the interface standards defined by the OCI Distribution Specification 1.1, it can also support any other client programs that follow the interface definition of the OCI Distribution Specification, such as oras, apptainer, helm, and nerdctl.
Quick Start
Now you can use this command to run a simple server:
docker run --name sigma -p 3000:3000 --rm tosone/sigma:nightly-alpine
The default username and password is: sigma/Admin@123. If you want to modify the default password, please refer to the configuration instructions.
Demo Server
It is deployed on an AWS EC2 instance (2C4G, 40G disk) running Debian 12.1 as the Linux distribution. The Docker version used is 25.0.3. The demo server was set up following these instructions.
Visit: https://sigma.tosone.cn, username/password: sigma/Admin@123
Architecture
The diagram below maps Sigma's main runtime layers, from client entry points to request handling, background workers, and the infrastructure services they depend on.
Features
- Support docker registry v2 protocol.
- Support OCI Image v1 Format and OCI Image Index v1 Format.
- Support OCI artifacts such as helm and so on.
- Support OCI sbom.
- Support Image security scan.
- Support registry proxy.
- Support Namespace quota.
- Support Image automatic garbage collection.
- Support Image sign.
- Support Image build in docker, podman and kubernetes.
- Support Image replication.
AI Clients and Automation
Sigma provides two integration paths for AI clients and external automation:
sigma-cli: a single binary that operates a remote Sigma server over the REST API. It covers namespaces, repositories, tags, artifacts, members, and users. See CLI & AI Agents.- External REST API skill:
tools/skill/sigma-api-operatorpackages a reusable skill andswagger.yamlso CLI agents such as Claude Code or Copilot CLI can discover Sigma APIs and operate resources through HTTP requests, including the areas the CLI does not wrap yet.