Comment by Zekio

what good options are there for container registry proxies / caches to protect against something like this?