Modifying the Immutable: Attaching Artifacts to OCI Images

Explore the process of attaching artifacts to OCI images in this 44-minute conference talk by Brandon Mitchell from BoxBoat, an IBM Company. Delve into the recent standardization of adding metadata to OCI registries, including attestations, signatures, and SBOMs. Learn how to attach additional data to images with immutable digests and understand the mechanisms for shipping SBOMs alongside images, both from the perspective of vendors generating SBOMs and users searching for them. Gain insights into potential challenges and pitfalls when implementing these techniques, equipping yourself with valuable knowledge for working with OCI image artifacts.