@Test
  public void testCanAttemptBlobMount_bearer_withToken() {
    // a synthetic token for accessing docker.io's openjdk with push and pull
    // {"access":[{"type":"repository","name":"library/openjdk","actions":["pull","push"]}]}
    String token =
        "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhY2Nlc3MiOlt7InR5cGUiOiJyZXBvc2l0b3J5IiwibmFtZSI6ImxpYnJhcnkvb3BlbmpkayIsImFjdGlvbnMiOlsicHVsbCIsInB1c2giXX1dfQ.VEn96Ug4eseKHX3WwP3PlgR9P7Y6VuYmMm-YRUjngFg";
    Authorization authorization = Authorization.fromBearerToken(token);
    Assert.assertNotNull(authorization);
    Assert.assertTrue(RegistryClient.canAttemptBlobMount(authorization, "library/openjdk"));
    Assert.assertFalse(RegistryClient.canAttemptBlobMount(authorization, "randomrepo"));
  }
Basic credential should allow access to all.
jib-core/src/test/java/com/google/cloud/tools/jib/registry/DockerRegistryBearerTokenTest.java