Secure the correct endpoint

conf/jwtproxy_conf.yaml

@@ -6,7 +6,7 @@ jwtproxy:
     listen_addr: unix:/tmp/jwtproxy.sock
     verifier:
       upstream: unix:/tmp/gunicorn_web.sock 
-      audience: http://quay.io
+      audience: quay
       key_server:
         type: keyregistry
         options:

conf/server-base.conf

@@ -49,7 +49,7 @@ location ~ ^/(v1/repositories|v2/auth)/ {
     limit_req zone=repositories burst=10;
 }
 
-location /api/v1/secscan/ {
+location /secscan/ {
     proxy_pass http://jwtproxy;
 }