---
name: "crane-google-container-registry-cli"
description: "Manage remote container registry images, manifests, and catalogs without local Docker daemons."
metadata:
  author: "Google"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "list remote tags crane"
  - "copy image crane"
  - "mutate container config crane"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# Crane Fast Container Registry Operations CLI

Executes registry management with go-containerregistry (Crane): querying remote tags (crane ls), copying images, inspecting digest manifests, altering image config, and exporting tarballs directly.

## When to Invoke
Invoke this skill whenever you need to:
- list remote tags crane
- copy image crane
- mutate container config crane

## Execution SOP & Rules
1. Authenticate to registry: crane auth login registry.example.com -u $USER -p $TOKEN.
2. List repository tags: crane ls my-org/my-repo | sort -V | tail -n 20.
3. Copy image directly between registries: crane copy gcr.io/source:tag registry.dest.com/dest:tag.
4. Inspect image digest manifest: crane manifest registry.example.com/app:v1.2 | jq .

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.