Protected Container Registry
Comments from @markpundsack
Should we also protect Container Registry? If user doesn't have a permission on the protected branch, the user should not be able to pull the image. This would be useful when using docker executor.
@dosuken123 That's a really interesting questions. It's not really about being able to pull images as that's not generally the problem, but someone could push to an image (that otherwise would have been generated from a protected branch) using their regular login. Please create a separate issue to discuss. I'm not aware of anyone asking for this restriction, but maybe it just hasn't come up yet.
Links / references
What is it? Why should someone use this feature? What is the underlying (business) problem? How do you use this feature?
Who is this for? Provide one or more use cases.
Make sure these are completed before closing the issue, with a link to the relevant commit.