Add OCI image annotations

These annotations are useful for tools (such as Renovate and Snyk) to use as well as for manual use by individuals. See: https://github.com/opencontainers/image-spec/blob/v1.1.0/annotations.md#pre-defined-annotation-keys
aquasecurity · Jun 5, 2024 · 20a101a · 20a101a
1 parent 229cef1
commit 20a101a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -28,6 +28,8 @@ jobs:
           for tag in ${tags[@]}; do
               oras push ghcr.io/aquasecurity/trivy-policies:${tag} \
               --config /dev/null:application/vnd.cncf.openpolicyagent.config.v1+json \
+              --annotation "org.opencontainers.image.source=$GITHUB_SERVER_URL/$GITHUB_REPOSITORY" \
+              --annotation "org.opencontainers.image.revision=$GITHUB_SHA" \
               bundle.tar.gz:application/vnd.cncf.openpolicyagent.layer.v1.tar+gzip
           done
       - name: Deploy checks bundle to ghcr.io