Function is_docker_image_public

misc/python/materialize/mzbuild.py:451–468

Whether the Docker Hub repository for `name` is public (tri-state). Reads repository metadata (`is_private`) via the Hub API rather than the registry, which both avoids the registry's anonymous pull-rate limit (see `mz_image_tag_exists`) and is tag-independent. A 404 means the repo is

(name: str)

def is_docker_image_public(name: str) -> bool | None:
    """Whether the Docker Hub repository for `name` is public (tri-state).

    Reads repository metadata (`is_private`) via the Hub API rather than the
    registry, which both avoids the registry's anonymous pull-rate limit (see
    `mz_image_tag_exists`) and is tag-independent. A 404 means the repo is
    private or absent; transient errors yield None rather than a false "private".
    """
    repo = name.rsplit(":", 1)[0]
    response = _get_with_retries(f"https://hub.docker.com/v2/repositories/{repo}/")
    if response is None:
        return None
    if response.status_code == 404:
        return False
    if response.status_code != 200:
        return None
    body = _json_dict_or_none(response)
    return None if body is None else not body.get("is_private", True)


def is_ghcr_image_public(name: str) -> bool | None: