Add insecure option to requests (#96)

* Add insecure option to requests

Signed-off-by: Marius Bertram <marius@brtrm.de>

Author: mariusbertram

.github/dev-requirements.txt

@@ -1,5 +1,5 @@
 pre-commit
-black
+black==23.3.0
 isort
 flake8
 mypy==0.961

CHANGELOG.md

@@ -14,6 +14,7 @@ and **Merged pull requests**. Critical items to know are:
 The versions coincide with releases on pip. Only major versions will be released as tags on Github.
 
 ## [0.0.x](https://github.com/oras-project/oras-py/tree/main) (0.0.x)
+  - Ensure insecure is passed to provider class (0.1.2)
   - patch fix for blob upload Windows, closes issue [93](https://github.com/oras-project/oras-py/issues/93) (0.1.19)
   - patch fix for empty manifest config on Windows, closes issue [90](https://github.com/oras-project/oras-py/issues/90) (0.1.18)
   - patch fix to correct session url pattern, closes issue [78](https://github.com/oras-project/oras-py/issues/78) (0.1.17)

oras/provider.py

@@ -47,6 +47,10 @@ def __init__(self, hostname: Optional[str] = None, insecure: bool = False):
         self.token: Optional[str] = None
         self._auths: dict = {}
         self._basic_auth = None
+        self._insecure = insecure
+
+        if insecure:
+            requests.packages.urllib3.disable_warnings()  # type: ignore
 
     def logout(self, hostname: str):
         """
@@ -842,6 +846,7 @@ def do_request(
             json=json,
             headers=headers,
             stream=stream,
+            verify=not self._insecure,
         )
 
         # A 401 response is a request for authentication

oras/version.py

@@ -2,7 +2,7 @@
 __copyright__ = "Copyright The ORAS Authors."
 __license__ = "Apache-2.0"
 
-__version__ = "0.1.19"
+__version__ = "0.1.2"
 AUTHOR = "Vanessa Sochat"
 EMAIL = "vsoch@users.noreply.github.com"
 NAME = "oras"