One registry host for docker and podman, speaking the OCI Distribution Spec. Public images come through a pull-through cache that verifies every digest; your own images push with a token; the policy gate decides what reaches a build.
docker login stores the token in its own credential store; pipe it from stdin to keep it out of your shell history. podman login works the same way.
The placeholders are your base URL and a token from the web UI. The guide covers the same steps for a single project, plain HTTP, verifying the change, and reverting it.
echo "<your token>" | docker login repo.example.com -u user --password-stdin
docker pull repo.example.com/library/nginx:1.27The client sees a registry. Behind it, Dependably Packages stages each upstream artefact and refuses the ones that fail a check you configured.
The Docker guide continues with a verification step, publishing your own packages, and reverting the configuration if you need to.