{"id":15558594,"url":"https://github.com/mozillazg/docker-credential-acr-helper","last_synced_at":"2026-03-15T10:44:40.457Z","repository":{"id":40603720,"uuid":"504576421","full_name":"mozillazg/docker-credential-acr-helper","owner":"mozillazg","description":"A credential helper for the Docker daemon that makes it easier to use Alibaba Cloud Container Registry(ACR).","archived":false,"fork":false,"pushed_at":"2026-01-19T00:41:08.000Z","size":234,"stargazers_count":7,"open_issues_count":6,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-03-11T14:45:22.834Z","etag":null,"topics":["acr","alibaba-cloud","alibabacloud","docker","docker-credential-helper"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mozillazg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null},"funding":{"custom":["https://mozillazg.com/wechat_donate.jpeg"],"patreon":"mozillazg"}},"created_at":"2022-06-17T15:02:49.000Z","updated_at":"2026-02-07T21:24:35.000Z","dependencies_parsed_at":"2024-06-21T17:59:26.184Z","dependency_job_id":"66d264a9-0360-4b53-99a1-2d63c4da7bfb","html_url":"https://github.com/mozillazg/docker-credential-acr-helper","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/mozillazg/docker-credential-acr-helper","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fdocker-credential-acr-helper","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fdocker-credential-acr-helper/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fdocker-credential-acr-helper/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fdocker-credential-acr-helper/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mozillazg","download_url":"https://codeload.github.com/mozillazg/docker-credential-acr-helper/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fdocker-credential-acr-helper/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30540718,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-15T07:17:37.589Z","status":"ssl_error","status_checked_at":"2026-03-15T07:17:31.738Z","response_time":61,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["acr","alibaba-cloud","alibabacloud","docker","docker-credential-helper"],"created_at":"2024-10-02T15:39:39.712Z","updated_at":"2026-03-15T10:44:40.452Z","avatar_url":"https://github.com/mozillazg.png","language":"Go","funding_links":["https://mozillazg.com/wechat_donate.jpeg","https://patreon.com/mozillazg"],"categories":[],"sub_categories":[],"readme":"# docker-credential-acr-helper\n\nA [credential helper](https://docs.docker.com/engine/reference/commandline/login/#credential-helpers) for the Docker daemon\nthat makes it easier to use [Alibaba Cloud Container Registry (ACR)](https://www.alibabacloud.com/product/container-registry).\n\n## Installation\n\nDownload the latest release from the [Releases](https://github.com/mozillazg/docker-credential-acr-helper/releases) page.\n\n## Configuration\n\n### ACR Credentials\n\nBy default, the helper searches for ACR credentials in the following order:\n\n1. It fetches the credentials via [RAM Roles for Service Accounts (RRSA) OIDC Token](https://www.alibabacloud.com/help/en/container-service-for-kubernetes/latest/use-rrsa-to-enforce-access-control)\n   when the `ALIBABA_CLOUD_ROLE_ARN`, `ALIBABA_CLOUD_OIDC_PROVIDER_ARN`, and\n   `ALIBABA_CLOUD_OIDC_TOKEN_FILE` environment variables are defined and are not empty.\n2. Use access key id and access key secret that are specified by the `ALIBABA_CLOUD_ACCESS_KEY_ID` and\n   `ALIBABA_CLOUD_ACCESS_KEY_SECRET` environment variables.\n3. A profile file whose path is specified by the `ALIBABA_CLOUD_CREDENTIALS_FILE` environment variable.\n4. A profile file in a default location:\n   * On Windows, this is `C:\\Users\\USER_NAME\\.alibabacloud\\credentials`.\n   * On other systems, it is `~/.alibabacloud/credentials`.\n5. It fetches the credentials of the RAM Role associated with the VM from the metadata server when\n   the environment variable `ALIBABA_CLOUD_ECS_METADATA` is defined and not empty.\n\nFor more information about configuring credentials, see [Provider](https://github.com/aliyun/credentials-go#provider)\nin the @aliyun/credentials-go.\n\n### RAM Permissions\n\nThe RAM user or RAM role used to access ACR must have the following permissions:\n\n```\n\"cr:GetAuthorizationToken\",\n\"cr:PullRepository\",\n\"cr:PushRepository\",  // if you need to push images\n\"cr:ListInstance\"\n```\n\n### Docker\n\nPlace the `docker-credential-acr-helper` binary on your `PATH` and\nadd a `credHelpers` entry to the Docker config file (`~/.docker/config.json`)\nfor each ACR registry that you care about.\nKeys specify the registry domain (**without** the `https://`), and values specify the suffix of the credential helper binary (everything after `docker-credential-`). \nFor example:\n\n```\n{\n\t\"credHelpers\": {\n\t\t\"registry.cn-beijing.aliyuncs.com\": \"acr-helper\",\n\t\t\"registry-intl.ap-southeast-1.aliyuncs.com\": \"acr-helper\",\n\t\t\"registry.\u003cregion\u003e.aliyuncs.com\": \"acr-helper\",\n\t\t\"\u003cacr-ee-instance-name\u003e-registry.\u003cregion\u003e.cr.aliyuncs.com\": \"acr-helper\"\n\t}\n}\n```\n\nFor more information about configuring Docker,\nsee [Credential helpers](https://docs.docker.com/engine/reference/commandline/login/#credential-helpers) in the Docker Documentation.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmozillazg%2Fdocker-credential-acr-helper","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmozillazg%2Fdocker-credential-acr-helper","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmozillazg%2Fdocker-credential-acr-helper/lists"}