For close to four years, a default configuration in Gitea’s built-in container registry has allowed anyone on the internet to ...