In regclient, pinned manifest digests may be ignored
A malicious registry could return a different digest for a pinned manifest without detection.
Advisories for Golang/Github.com/Regclient/Regclient package
2024
A malicious registry could return a different digest for a pinned manifest without detection.