Modifying the Immutable: Attaching Artifacts to OCI Images

Explore the intricacies of attaching artifacts to OCI images in this informative conference talk. Delve into the standardized process recently established by OCI for adding metadata such as attestations, signatures, and SBOMs to images without altering their immutable digest. Learn how to implement tooling for shipping SBOMs alongside images, both from the perspective of vendors generating SBOMs and users searching for them. Gain valuable insights into potential challenges and pitfalls you may encounter when implementing these techniques yourself. This 36-minute presentation by Brandon Mitchell from BoxBoat, an IBM Company, offers a comprehensive look at the evolving landscape of image metadata in OCI registries.