Support for OCI artifacts with refers
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 30/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- go
- Domain
- backend-api-design
Research direction
No file, test, or entry point is named. Start by reviewing the distribution-spec referral API and the repository's existing image metadata and attestation handling; done means the library can find SBOMs and provenance through OCI artifact referrals, including cases that do not use BuildKit attestations.
Written by the indexing model from the issue text.
Description
We should add support for finding SBOMs/Provenance through OCI artifacts with the new distribution-spec referral API.
This will help ensure that we can provide as rich metadata as possible to users, even if they're not using BuildKit attestations (though ofc, we'll only be able to give the best results for that case). Also, if BuildKit ever supports generating OCI artifacts with this API, we'll need to support it in this library as well.
- Dominant language
- Go
- Stars
- 15
- Forks
- 5
- PR merge metrics
- No merged PRs in 30d
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from docker/go-imageinspect
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
docker/go-imageinspect#22 ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
docker/go-imageinspect#21 ·
-
Difficulty 5/5 Over a week Newbie friendliness 32/100
docker/go-imageinspect#13 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
docker/go-imageinspect#11 ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
docker/go-imageinspect#10 ·
All issues in docker/go-imageinspect
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
rossoctl/context-guru#346 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
prime-radiant-inc/evener#2883 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
gravitational/teleport#69805 ·
Maintainers usually reply within 11 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
Under Poisson sampling, the `PLDAccountant` composes the inner event both before and after samplingOpen
Difficulty 2/5 Half a day Newbie friendliness 78/100
google/differential-privacy#496 ·