Aviral Takkar

Hi @corrupt-code, would you please create a support ticket for further assistance? https://azure.microsoft.com/en-us/support/create-ticket/

> Hi @Kapsztajn, the suggested mitigation did not work for me as well. It was able to fetch the token with an expiry that was reasonable, but I was able...

We are leaning towards not implementing this header in Azure Container Registry due to the added processing cost of consistently calculating this value.

Consider using Notation, which is an OCI standard for container image signing. https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca https://github.com/notaryproject/notation