v0.3.0

Added

• Go module registry adapter — pull Go modules through Jōei
  (GOPROXY=http://<jo-ei>/go) so module zips pass the supply-chain, CVE, and
  malware gates. Metadata endpoints (.info / .mod / @v/list / @latest)
  are proxied transparently. Disabled by default (registries.go).
• Offline by-digest Docker pulls — a by-digest pull with a fresh cached
  verdict is served straight from the cache, without contacting the upstream
  registry; an expired verdict falls back to the cached artifact when the
  upstream is unreachable. By-tag pulls still need the upstream to resolve the
  digest.

Changed

• Coalesced re-checks — concurrent lazy re-checks of one expired cache
  entry, and concurrent Docker evaluations of one image digest, now collapse
  into a single scan (singleflight) whose verdict every waiting request shares.

Docker image: docker pull ghcr.io/ggwplab/jo-ei:0.3.0