René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Quay registry integration test ignores insecure flag when using robot account credentials, causing test failures for self-signed certificates","articleBody":"The Quay registry integration test function (Test() method in pkg/registries/quay/quay.go) creates an HTTP client that doesn't respect the insecure configuration flag when using robot account credentials (username/password). This causes test validation to fail when connecting to Quay instances with self-signed certificates, even though the actual integration works correctly for image scanning operations.\n\n**Problem Description**\nIn pkg/registries/quay/quay.go around line 158, the Test() method has conditional logic:\n\n```func (q *Quay) Test() error {\n    if q.config.GetOauthToken() != \"\" {\n        return q.Registry.Test()  // This works correctly with insecure flag\n    }\n    // When using robot credentials (no OAuth token), this path is taken:\n    url := urlfmt.FormatURL(q.config.GetEndpoint(), urlfmt.HTTPS, urlfmt.NoTrailingSlash)\n    discoveryURL := url + \"/api/v1/discovery\"\n    client := http.Client{\n        Timeout: timeout,  // Missing TLS configuration!\n    }\n```\n\nThe issue occurs specifically when:\n\n- Using robot account credentials (username/password) instead of OAuth token\n\n- insecure: true is set in the Quay integration config\n\n**Expected Behavior**\nThe test function should respect the insecure configuration flag when using robot account credentials, similar to how it works with OAuth token authentication.\n\n**Current Workaround**\nCurrently, users must set skipTestIntegration: true to avoid test failures, which disables validation entirely.\n\n**Proposed Solution**\nThe Test() function should configure the HTTP client's TLS settings when using robot credentials:\n\n```\nclient := \u0026http.Client{\n    Timeout: timeout,\n}\n\nif q.config.GetInsecure() {\n    transport := \u0026http.Transport{\n        TLSClientConfig: \u0026tls.Config{InsecureSkipVerify: true},\n    }\n    client.Transport = transport\n}\n```","author":{"url":"https://github.com/kwiatkowski-vw","@type":"Person","name":"kwiatkowski-vw"},"datePublished":"2026-01-13T11:24:24.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/18461/stackrox/issues/18461"}