Can I configure a custom credential helper other than for AWS ECR?

[karun-verghese]

In my organization I use zot as a local registry and we have another OCI registry in the cloud. Due to certain constraints, we now have a need to implement some sort of custom auth service for our cloud registry. So my question is, can I write my own credentials helper, somehow deploy that with my zot registry and just configure it in the zot config so that whenever I need to pull something from that cloud registry, my custom credential helper would be called?

I need to know how to:

1. Write my own credential helper ( Any protocols or API specs would be useful)
2. How to package it with my zot deployment
3. Configuring the zot-config to use this credentials helper

Any help would be appreciated! Thanks!