From 0b6e3afc29c31ee2f813404037398981b8da7274 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 24 Aug 2026 14:44:15 +0000
Subject: [PATCH 1/2] Initial plan


From 967325aa0ea695812cc47906a9cf8c5cca9e5d67 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 24 Aug 2026 14:46:30 +0000
Subject: [PATCH 2/2] fix: keep digest image validation private

---
 src/image-resolver.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/image-resolver.ts b/src/image-resolver.ts
index a61f1071d..f45d8f0ed 100644
--- a/src/image-resolver.ts
+++ b/src/image-resolver.ts
@@ -58,12 +58,12 @@ const DIGEST = 'sha256:[a-f0-9]{64}';
  * Canonical pattern for a compiler-authorized image reference. Kept in sync
  * with `$defs/digestPinnedImage` in the AWF configuration JSON Schema.
  */
-export const DIGEST_PINNED_IMAGE_PATTERN =
+const DIGEST_PINNED_IMAGE_PATTERN =
   `^${REGISTRY}/${PATH_COMPONENT}(?:/${PATH_COMPONENT})*:${TAG}@${DIGEST}$`;
 
 const DIGEST_PINNED_IMAGE = new RegExp(DIGEST_PINNED_IMAGE_PATTERN);
 
-export function isDigestPinnedImageReference(reference: string): boolean {
+function isDigestPinnedImageReference(reference: string): boolean {
   if (/\s|\$|\{\{/.test(reference)) return false;
   return DIGEST_PINNED_IMAGE.test(reference);
 }