chainguard.md

chainguard

❯ crane digest cgr.dev/chainguard/python:latest
sha256:4cd9986c4e8c6c5f091a46f38f19b212e0f46a21e8e6e540596f266a123781c2

Image manifest

❯ crane manifest cgr.dev/chainguard/python@sha256:4cd9986c4e8c6c5f091a46f38f19b212e0f46a21e8e6e540596f266a123781c2 | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.index.v1+json",
  "manifests": [
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "size": 714,
      "digest": "sha256:74236990e28a0295fae4aa12142e95181f12d01684fdf76f98486aac834bb985",
      "platform": {
        "architecture": "amd64",
        "os": "linux"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "size": 714,
      "digest": "sha256:3b11897e474afd7a44608c69b91880c40dd01637d3bed6e5deee862b2ba98d56",
      "platform": {
        "architecture": "arm64",
        "os": "linux"
      }
    }
  ],
  "annotations": {
    "org.opencontainers.image.authors": "Chainguard Team https://www.chainguard.dev/",
    "org.opencontainers.image.source": "https://github.com/chainguard-images/images/tree/main/images/python",
    "org.opencontainers.image.url": "https://edu.chainguard.dev/chainguard/chainguard-images/reference/python/"
  }
}

Image Attestations

❯ crane manifest cgr.dev/chainguard/python:sha256-4cd9986c4e8c6c5f091a46f38f19b212e0f46a21e8e6e540596f266a123781c2.att | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
  "config": {
    "mediaType": "application/vnd.docker.container.image.v1+json",
    "size": 451,
    "digest": "sha256:5500b21cdb4b7992bee7caac3d0982b984422941e5b6b1d3d92a863ca4c77b2c"
  },
  "layers": [
    {
      "mediaType": "application/vnd.dsse.envelope.v1+json",
      "size": 1712,
      "digest": "sha256:daf8f2b0d642ddf540a324f6a51d64394f205050bf5eac99893dc4ce1acf69f0",
      "annotations": {
        "dev.cosignproject.cosign/signature": "",
        "dev.sigstore.cosign/bundle": "{\"SignedEntryTimestamp\":\"MEQCIH0dxba1itxJWp1sdiWA1K82864oqWbF8BheFrbU9WvQAiA/yXKdFCASZ5m+9a27zNaQwykGeUtal6C9nvuPIPiCNg==\",\"Payload\":{\"body\":\"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\",\"integratedTime\":1706055513,\"logIndex\":65959785,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}",
        "dev.sigstore.cosign/certificate": "-----BEGIN CERTIFICATE-----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\n0bAnT4LsZ7z4SIExPuw=\n-----END CERTIFICATE-----\n",
        "dev.sigstore.cosign/chain": "-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----\n",
        "predicateType": "https://slsa.dev/provenance/v1"
      }
    },
    {
      "mediaType": "application/vnd.dsse.envelope.v1+json",
      "size": 2464,
      "digest": "sha256:e6998c3882b531b9ba54d396501572408818c8a955142f06635f5c3641489112",
      "annotations": {
        "dev.cosignproject.cosign/signature": "",
        "dev.sigstore.cosign/bundle": "{\"SignedEntryTimestamp\":\"MEUCIH4KjfdXuL3QtRK39lb/IFrkozThw5l0V1eEuD5uAJqxAiEA0+tQaefdpl3TWze0XUUesl60E6cN3VR1O5TpbErBUqc=\",\"Payload\":{\"body\":\"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiJlNjk5OGMzODgyYjUzMWI5YmE1NGQzOTY1MDE1NzI0MDg4MThjOGE5NTUxNDJmMDY2MzVmNWMzNjQxNDg5MTEyIn0sInBheWxvYWRIYXNoIjp7ImFsZ29yaXRobSI6InNoYTI1NiIsInZhbHVlIjoiMDk5NWYxNjc4MTMzYmE5OTczMWE2Yjc5MzMzNDE0NmVjYTc4M2M3MmViYjYwNDkzZDE4ODJlNDc3ZmRmOTE4YyJ9fSwicHVibGljS2V5IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVY3Jha05EUW05RFowRjNTVUpCWjBsVlUzUnFha3RzSzNWUWQwSTRNR05LTVU1SVpWTkhiVGw1YW5SVmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFJkMDFVU1RCTlJFRjRUbXBOZWxkb1kwNU5hbEYzVFZSSk1FMUVRWGxPYWsxNlYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZXYzJvME1XWnpiVkJ6Tld0TFIycHVVWGN2WjNsUWJGcHBSVXhuTW05MFl6TXpRMWdLUW10WVNYRmxXV0l6UW1obE0wdEdVRmREWlRoQ1RYaFlMME5qVTNkbmRESnZOMDVqVUVGVmFUVjBiamMwYkdWTU1qWlBRMEphT0hkbloxZGlUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlYzTTNwSUNuYzRVMDgwVTFCTGJVdG5jRXhvYjFwT1FXNXplRTh3ZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDJGQldVUldVakJTUVZGSUwwSkdOSGRZU1ZwaFlVaFNNR05JVFRaTWVUbHVZVmhTYjJSWFNYVlpNamwwVERKT2IxbFhiSFZhTTFab1kyMVJkQXBoVnpGb1dqSldla3d5YkhSWlYyUnNZM2s0ZFZveWJEQmhTRlpwVEROa2RtTnRkRzFpUnprelkzazVlVnBYZUd4WldFNXNURzVzYUdKWGVFRmpiVlp0Q21ONU9XOWFWMFpyWTNrNWRGbFhiSFZOUkd0SFEybHpSMEZSVVVKbk56aDNRVkZGUlVzeWFEQmtTRUo2VDJrNGRtUkhPWEphVnpSMVdWZE9NR0ZYT1hVS1kzazFibUZZVW05a1Ywb3hZekpXZVZreU9YVmtSMVoxWkVNMWFtSXlNSGRHWjFsTFMzZFpRa0pCUjBSMmVrRkNRV2RSU1dNeVRtOWFWMUl4WWtkVmR3cE9aMWxMUzNkWlFrSkJSMFIyZWtGQ1FYZFJiMDFxWkd0T1JGRTBUakpHYVU1RVJYcGFSRlUwVFhwRmQwMVhVWGROVkZab1RVZEthVTVxUlhkT1JFa3dDbHBxYXpGTk1sRjZUMFJCYzBKbmIzSkNaMFZGUVZsUEwwMUJSVVZDUWpSMVdqSnNNR0ZJVm1sTU0yUjJZMjEwYldKSE9UTmplVGw1V2xkNGJGbFlUbXdLVEc1c2FHSlhkM2RLWjFsTFMzZFpRa0pCUjBSMmVrRkNRbEZSV1ZreWFHaGhWelZ1WkZkR2VWcERNWEJpVjBadVdsaE5kbUZYTVdoYU1sWjZUVUl3UndwRGFYTkhRVkZSUW1jM09IZEJVVmxGUkROS2JGcHVUWFpoUjFab1draE5kbUpYUm5CaWFrRTNRbWR2Y2tKblJVVkJXVTh2VFVGRlNVSkRNRTFMTW1nd0NtUklRbnBQYVRoMlpFYzVjbHBYTkhWWlYwNHdZVmM1ZFdONU5XNWhXRkp2WkZkS01XTXlWbmxaTWpsMVpFZFdkV1JETldwaU1qQjNZV2RaUzB0M1dVSUtRa0ZIUkhaNlFVSkRVVkpqUkVad2IyUklVbmRqZW05MlRESmtjR1JIYURGWmFUVnFZakl3ZGxreWFHaGhWelZ1WkZkR2VWcERNWEJpVjBadVdsaE5kZ3BoVnpGb1dqSldla3g1Tlc1aFdGSnZaRmRKZG1ReU9YbGhNbHB6WWpOa2Vrd3pTbXhpUjFab1l6SlZkV1ZYUm5SaVJVSjVXbGRhZWt3eWFHeFpWMUo2Q2t3eU1XaGhWelIzVDBGWlMwdDNXVUpDUVVkRWRucEJRa05uVVhGRVEyZDVUakpSTUU1RVp6TlpWMGt3VFZST2EwNVVaM3BOVkVGNFdrUkJlRTVYUlhjS1dXMUpNazFVUVRCTmFsSnRUMVJWZWxwRVRUUk5RakJIUTJselIwRlJVVUpuTnpoM1FWRnpSVVIzZDA1YU1td3dZVWhXYVV4WGFIWmpNMUpzV2tSQk53cENaMjl5UW1kRlJVRlpUeTlOUVVWTlFrTXdUVXN5YURCa1NFSjZUMms0ZGxveWJEQmhTRlpwVEcxT2RtSlRPV3BoUjBad1ltMWtNVmxZU210TVYyeDBDbGxYWkd4amVUbHdZbGRHYmxwWVRYZFBRVmxMUzNkWlFrSkJSMFIyZWtGQ1JGRlJjVVJEWjNsT01sRXdUa1JuTTFsWFNUQk5WRTVyVGxSbmVrMVVRWGdLV2tSQmVFNVhSWGRaYlVreVRWUkJNRTFxVW0xUFZGVjZXa1JOTkUxQ09FZERhWE5IUVZGUlFtYzNPSGRCVVRSRlJWRjNVR050Vm0xamVUbHZXbGRHYXdwamVUbDBXVmRzZFUxQ2EwZERhWE5IUVZGUlFtYzNPSGRCVVRoRlEzZDNTazVVV1hwT1ZFVjNUMVJWZVUxRVVVZERhWE5IUVZGUlFtYzNPSGRCVWtGRkNrcG5kMnRoU0ZJd1kwaE5Oa3g1T1c1aFdGSnZaRmRKZFZreU9YUk1NazV2V1Zkc2RWb3pWbWhqYlZGMFlWY3hhRm95Vm5wTlFtdEhRMmx6UjBGUlVVSUtaemM0ZDBGU1JVVkRkM2RLVFZSRmVrMVVhelJPVkZFeFRVZHZSME5wYzBkQlVWRkNaemM0ZDBGU1NVVllRWGhoWVVoU01HTklUVFpNZVRsdVlWaFNid3BrVjBsMVdUSTVkRXd5VG05WlYyeDFXak5XYUdOdFVYUmhWekZvV2pKV2Vrd3liSFJaVjJSc1kzazRkVm95YkRCaFNGWnBURE5rZG1OdGRHMWlSemt6Q21ONU9YbGFWM2hzV1ZoT2JFeHViR2hpVjNoQlkyMVdiV041T1c5YVYwWnJZM2s1ZEZsWGJIVk5SR2RIUTJselIwRlJVVUpuTnpoM1FWSk5SVXRuZDI4S1RXcGthMDVFVVRST01rWnBUa1JGZWxwRVZUUk5la1YzVFZkUmQwMVVWbWhOUjBwcFRtcEZkMDVFU1RCYWFtc3hUVEpSZWs5RVFWbENaMjl5UW1kRlJRcEJXVTh2VFVGRlZVSkJiMDFEU0U1cVlVZFdhMlJYZUd4TlJqUkhRMmx6UjBGUlVVSm5OemgzUVZKVlJWVkJlRTloU0ZJd1kwaE5Oa3g1T1c1aFdGSnZDbVJYU1hWWk1qbDBUREpPYjFsWGJIVmFNMVpvWTIxUmRHRlhNV2hhTWxaNlRESnNkRmxYWkd4amVUbG9XVE5TY0dJeU5YcE1NMG94WW01TmRrNTZXWG9LVFhwUk5VNXFVWGxOYVRsb1pFaFNiR0pZUWpCamVUaDRUVUpaUjBOcGMwZEJVVkZDWnpjNGQwRlNXVVZEUVhkSFkwaFdhV0pIYkdwTlNVZE1RbWR2Y2dwQ1owVkZRV1JhTlVGblVVTkNTREJGWlhkQ05VRklZMEV6VkRCM1lYTmlTRVZVU21wSFVqUmpiVmRqTTBGeFNrdFljbXBsVUVzekwyZzBjSGxuUXpod0NqZHZORUZCUVVkT1QwNU9aakZuUVVGQ1FVMUJVMFJDUjBGcFJVRjJOSGN6VEZBMVNtMTBWVWhqYW0xdWVFNVdjMEpSTDAxVlFVUmhNRzh3T0hVeVNVY0tReXRsVGpORFkwTkpVVVJRYWpWdWRHaDRWWE5NWlRWTFVreEZiMVZHUXpGNFFsaGhWVWRTTmpVMlIyODNUbk5KY0dKTE9HUnFRVXRDWjJkeGFHdHFUd3BRVVZGRVFYZE9iMEZFUW14QmFrRnhaVE0yVjFGdVMwMXRkeXRJZGs5SE1GRXhjQ3R2U1dadFExVjJWRWgwVWtOeVRtNXhhSFl4UTBSRU9HaGthMHNyQ2pSYU1HTmpRemd3TjFab2RpOXVhME5OVVVSamEwMWxNMGN6Vm5CUWNURXlRek00VDI0dmVuQlhaRGhWVUVGUGFsSldTbGwwVUhsSVV6aHVZMGRHWldJS01HSkJibFEwVEhOYU4zbzBVMGxGZUZCMWR6MEtMUzB0TFMxRlRrUWdRMFZTVkVsR1NVTkJWRVV0TFMwdExRbz0ifX0=\",\"integratedTime\":1706055502,\"logIndex\":65959662,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}",
        "dev.sigstore.cosign/certificate": "-----BEGIN CERTIFICATE-----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\n0bAnT4LsZ7z4SIExPuw=\n-----END CERTIFICATE-----\n",
        "dev.sigstore.cosign/chain": "-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIIB9zCCAXygAwIBAgIUALZNAPFdxHPwjeDloDwyYChAO/4wCgYIKoZIzj0EAwMw\nKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0y\nMTEwMDcxMzU2NTlaFw0zMTEwMDUxMzU2NThaMCoxFTATBgNVBAoTDHNpZ3N0b3Jl\nLmRldjERMA8GA1UEAxMIc2lnc3RvcmUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAT7\nXeFT4rb3PQGwS4IajtLk3/OlnpgangaBclYpsYBr5i+4ynB07ceb3LP0OIOZdxex\nX69c5iVuyJRQ+Hz05yi+UF3uBWAlHpiS5sh0+H2GHE7SXrk1EC5m1Tr19L9gg92j\nYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRY\nwB5fkUWlZql6zJChkyLQKsXF+jAfBgNVHSMEGDAWgBRYwB5fkUWlZql6zJChkyLQ\nKsXF+jAKBggqhkjOPQQDAwNpADBmAjEAj1nHeXZp+13NWBNa+EDsDP8G1WWg1tCM\nWP/WHPqpaVo0jhsweNFZgSs0eE7wYI4qAjEA2WB9ot98sIkoF3vZYdd3/VtWB5b9\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----\n",
        "predicateType": "https://apko.dev/image-configuration"
      }
    },
    {
      "mediaType": "application/vnd.dsse.envelope.v1+json",
      "size": 5120,
      "digest": "sha256:852191e9690f99741349dc464b76e3ee32bae47d6d0997f1c9e2309ba915ace0",
      "annotations": {
        "dev.cosignproject.cosign/signature": "",
        "dev.sigstore.cosign/bundle": "{\"SignedEntryTimestamp\":\"MEUCIQCEYH5cXvZdaOMeSsOjHoV/J7+fhJmLwNdBAJfUYxKWwAIgJnPI0/WfeUmnEqNQYwzJN8QwL7ugQcx7PTL+FIZixyw=\",\"Payload\":{\"body\":\"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaW50b3RvIiwic3BlYyI6eyJjb250ZW50Ijp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI4NTIxOTFlOTY5MGY5OTc0MTM0OWRjNDY0Yjc2ZTNlZTMyYmFlNDdkNmQwOTk3ZjFjOWUyMzA5YmE5MTVhY2UwIn0sInBheWxvYWRIYXNoIjp7ImFsZ29yaXRobSI6InNoYTI1NiIsInZhbHVlIjoiYTFiYjEyMzgyNTkwYzExNmVjY2Y3MDhlODhlNjk0ODQ5MWMxOWE4MGUxNzljMzljOGRkOGQxMmIwMWQ0NzYzOCJ9fSwicHVibGljS2V5IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVY3Jha05EUW05RFowRjNTVUpCWjBsVlUzUnFha3RzSzNWUWQwSTRNR05LTVU1SVpWTkhiVGw1YW5SVmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFJkMDFVU1RCTlJFRjRUbXBOZWxkb1kwNU5hbEYzVFZSSk1FMUVRWGxPYWsxNlYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZXYzJvME1XWnpiVkJ6Tld0TFIycHVVWGN2WjNsUWJGcHBSVXhuTW05MFl6TXpRMWdLUW10WVNYRmxXV0l6UW1obE0wdEdVRmREWlRoQ1RYaFlMME5qVTNkbmRESnZOMDVqVUVGVmFUVjBiamMwYkdWTU1qWlBRMEphT0hkbloxZGlUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlYzTTNwSUNuYzRVMDgwVTFCTGJVdG5jRXhvYjFwT1FXNXplRTh3ZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDJGQldVUldVakJTUVZGSUwwSkdOSGRZU1ZwaFlVaFNNR05JVFRaTWVUbHVZVmhTYjJSWFNYVlpNamwwVERKT2IxbFhiSFZhTTFab1kyMVJkQXBoVnpGb1dqSldla3d5YkhSWlYyUnNZM2s0ZFZveWJEQmhTRlpwVEROa2RtTnRkRzFpUnprelkzazVlVnBYZUd4WldFNXNURzVzYUdKWGVFRmpiVlp0Q21ONU9XOWFWMFpyWTNrNWRGbFhiSFZOUkd0SFEybHpSMEZSVVVKbk56aDNRVkZGUlVzeWFEQmtTRUo2VDJrNGRtUkhPWEphVnpSMVdWZE9NR0ZYT1hVS1kzazFibUZZVW05a1Ywb3hZekpXZVZreU9YVmtSMVoxWkVNMWFtSXlNSGRHWjFsTFMzZFpRa0pCUjBSMmVrRkNRV2RSU1dNeVRtOWFWMUl4WWtkVmR3cE9aMWxMUzNkWlFrSkJSMFIyZWtGQ1FYZFJiMDFxWkd0T1JGRTBUakpHYVU1RVJYcGFSRlUwVFhwRmQwMVhVWGROVkZab1RVZEthVTVxUlhkT1JFa3dDbHBxYXpGTk1sRjZUMFJCYzBKbmIzSkNaMFZGUVZsUEwwMUJSVVZDUWpSMVdqSnNNR0ZJVm1sTU0yUjJZMjEwYldKSE9UTmplVGw1V2xkNGJGbFlUbXdLVEc1c2FHSlhkM2RLWjFsTFMzZFpRa0pCUjBSMmVrRkNRbEZSV1ZreWFHaGhWelZ1WkZkR2VWcERNWEJpVjBadVdsaE5kbUZYTVdoYU1sWjZUVUl3UndwRGFYTkhRVkZSUW1jM09IZEJVVmxGUkROS2JGcHVUWFpoUjFab1draE5kbUpYUm5CaWFrRTNRbWR2Y2tKblJVVkJXVTh2VFVGRlNVSkRNRTFMTW1nd0NtUklRbnBQYVRoMlpFYzVjbHBYTkhWWlYwNHdZVmM1ZFdONU5XNWhXRkp2WkZkS01XTXlWbmxaTWpsMVpFZFdkV1JETldwaU1qQjNZV2RaUzB0M1dVSUtRa0ZIUkhaNlFVSkRVVkpqUkVad2IyUklVbmRqZW05MlRESmtjR1JIYURGWmFUVnFZakl3ZGxreWFHaGhWelZ1WkZkR2VWcERNWEJpVjBadVdsaE5kZ3BoVnpGb1dqSldla3g1Tlc1aFdGSnZaRmRKZG1ReU9YbGhNbHB6WWpOa2Vrd3pTbXhpUjFab1l6SlZkV1ZYUm5SaVJVSjVXbGRhZWt3eWFHeFpWMUo2Q2t3eU1XaGhWelIzVDBGWlMwdDNXVUpDUVVkRWRucEJRa05uVVhGRVEyZDVUakpSTUU1RVp6TlpWMGt3VFZST2EwNVVaM3BOVkVGNFdrUkJlRTVYUlhjS1dXMUpNazFVUVRCTmFsSnRUMVJWZWxwRVRUUk5RakJIUTJselIwRlJVVUpuTnpoM1FWRnpSVVIzZDA1YU1td3dZVWhXYVV4WGFIWmpNMUpzV2tSQk53cENaMjl5UW1kRlJVRlpUeTlOUVVWTlFrTXdUVXN5YURCa1NFSjZUMms0ZGxveWJEQmhTRlpwVEcxT2RtSlRPV3BoUjBad1ltMWtNVmxZU210TVYyeDBDbGxYWkd4amVUbHdZbGRHYmxwWVRYZFBRVmxMUzNkWlFrSkJSMFIyZWtGQ1JGRlJjVVJEWjNsT01sRXdUa1JuTTFsWFNUQk5WRTVyVGxSbmVrMVVRWGdLV2tSQmVFNVhSWGRaYlVreVRWUkJNRTFxVW0xUFZGVjZXa1JOTkUxQ09FZERhWE5IUVZGUlFtYzNPSGRCVVRSRlJWRjNVR050Vm0xamVUbHZXbGRHYXdwamVUbDBXVmRzZFUxQ2EwZERhWE5IUVZGUlFtYzNPSGRCVVRoRlEzZDNTazVVV1hwT1ZFVjNUMVJWZVUxRVVVZERhWE5IUVZGUlFtYzNPSGRCVWtGRkNrcG5kMnRoU0ZJd1kwaE5Oa3g1T1c1aFdGSnZaRmRKZFZreU9YUk1NazV2V1Zkc2RWb3pWbWhqYlZGMFlWY3hhRm95Vm5wTlFtdEhRMmx6UjBGUlVVSUtaemM0ZDBGU1JVVkRkM2RLVFZSRmVrMVVhelJPVkZFeFRVZHZSME5wYzBkQlVWRkNaemM0ZDBGU1NVVllRWGhoWVVoU01HTklUVFpNZVRsdVlWaFNid3BrVjBsMVdUSTVkRXd5VG05WlYyeDFXak5XYUdOdFVYUmhWekZvV2pKV2Vrd3liSFJaVjJSc1kzazRkVm95YkRCaFNGWnBURE5rZG1OdGRHMWlSemt6Q21ONU9YbGFWM2hzV1ZoT2JFeHViR2hpVjNoQlkyMVdiV041T1c5YVYwWnJZM2s1ZEZsWGJIVk5SR2RIUTJselIwRlJVVUpuTnpoM1FWSk5SVXRuZDI4S1RXcGthMDVFVVRST01rWnBUa1JGZWxwRVZUUk5la1YzVFZkUmQwMVVWbWhOUjBwcFRtcEZkMDVFU1RCYWFtc3hUVEpSZWs5RVFWbENaMjl5UW1kRlJRcEJXVTh2VFVGRlZVSkJiMDFEU0U1cVlVZFdhMlJYZUd4TlJqUkhRMmx6UjBGUlVVSm5OemgzUVZKVlJWVkJlRTloU0ZJd1kwaE5Oa3g1T1c1aFdGSnZDbVJYU1hWWk1qbDBUREpPYjFsWGJIVmFNMVpvWTIxUmRHRlhNV2hhTWxaNlRESnNkRmxYWkd4amVUbG9XVE5TY0dJeU5YcE1NMG94WW01TmRrNTZXWG9LVFhwUk5VNXFVWGxOYVRsb1pFaFNiR0pZUWpCamVUaDRUVUpaUjBOcGMwZEJVVkZDWnpjNGQwRlNXVVZEUVhkSFkwaFdhV0pIYkdwTlNVZE1RbWR2Y2dwQ1owVkZRV1JhTlVGblVVTkNTREJGWlhkQ05VRklZMEV6VkRCM1lYTmlTRVZVU21wSFVqUmpiVmRqTTBGeFNrdFljbXBsVUVzekwyZzBjSGxuUXpod0NqZHZORUZCUVVkT1QwNU9aakZuUVVGQ1FVMUJVMFJDUjBGcFJVRjJOSGN6VEZBMVNtMTBWVWhqYW0xdWVFNVdjMEpSTDAxVlFVUmhNRzh3T0hVeVNVY0tReXRsVGpORFkwTkpVVVJRYWpWdWRHaDRWWE5NWlRWTFVreEZiMVZHUXpGNFFsaGhWVWRTTmpVMlIyODNUbk5KY0dKTE9HUnFRVXRDWjJkeGFHdHFUd3BRVVZGRVFYZE9iMEZFUW14QmFrRnhaVE0yVjFGdVMwMXRkeXRJZGs5SE1GRXhjQ3R2U1dadFExVjJWRWgwVWtOeVRtNXhhSFl4UTBSRU9HaGthMHNyQ2pSYU1HTmpRemd3TjFab2RpOXVhME5OVVVSamEwMWxNMGN6Vm5CUWNURXlRek00VDI0dmVuQlhaRGhWVUVGUGFsSldTbGwwVUhsSVV6aHVZMGRHWldJS01HSkJibFEwVEhOYU4zbzBVMGxGZUZCMWR6MEtMUzB0TFMxRlRrUWdRMFZTVkVsR1NVTkJWRVV0TFMwdExRbz0ifX0=\",\"integratedTime\":1706055492,\"logIndex\":65959559,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}",
        "dev.sigstore.cosign/certificate": "-----BEGIN CERTIFICATE-----\nMIIG+jCCBoCgAwIBAgIUStjjKl+uPwB80cJ1NHeSGm9yjtUwCgYIKoZIzj0EAwMw\nNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRl\ncm1lZGlhdGUwHhcNMjQwMTI0MDAxNjMzWhcNMjQwMTI0MDAyNjMzWjAAMFkwEwYH\nKoZIzj0CAQYIKoZIzj0DAQcDQgAEVsj41fsmPs5kKGjnQw/gyPlZiELg2otc33CX\nBkXIqeYb3Bhe3KFPWCe8BMxX/CcSwgt2o7NcPAUi5tn74leL26OCBZ8wggWbMA4G\nA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUw3zH\nw8SO4SPKmKgpLhoZNAnsxO0wHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4Y\nZD8waAYDVR0RAQH/BF4wXIZaaHR0cHM6Ly9naXRodWIuY29tL2NoYWluZ3VhcmQt\naW1hZ2VzL2ltYWdlcy8uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNlLnlhbWxAcmVm\ncy9oZWFkcy9tYWluMDkGCisGAQQBg78wAQEEK2h0dHBzOi8vdG9rZW4uYWN0aW9u\ncy5naXRodWJ1c2VyY29udGVudC5jb20wFgYKKwYBBAGDvzABAgQIc2NoZWR1bGUw\nNgYKKwYBBAGDvzABAwQoMjdkNDQ4N2FiNDEzZDU4MzEwMWQwMTVhMGJiNjEwNDI0\nZjk1M2QzODAsBgorBgEEAYO/MAEEBB4uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNl\nLnlhbWwwJgYKKwYBBAGDvzABBQQYY2hhaW5ndWFyZC1pbWFnZXMvaW1hZ2VzMB0G\nCisGAQQBg78wAQYED3JlZnMvaGVhZHMvbWFpbjA7BgorBgEEAYO/MAEIBC0MK2h0\ndHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20wagYKKwYB\nBAGDvzABCQRcDFpodHRwczovL2dpdGh1Yi5jb20vY2hhaW5ndWFyZC1pbWFnZXMv\naW1hZ2VzLy5naXRodWIvd29ya2Zsb3dzL3JlbGVhc2UueWFtbEByZWZzL2hlYWRz\nL21haW4wOAYKKwYBBAGDvzABCgQqDCgyN2Q0NDg3YWI0MTNkNTgzMTAxZDAxNWEw\nYmI2MTA0MjRmOTUzZDM4MB0GCisGAQQBg78wAQsEDwwNZ2l0aHViLWhvc3RlZDA7\nBgorBgEEAYO/MAEMBC0MK2h0dHBzOi8vZ2l0aHViLmNvbS9jaGFpbmd1YXJkLWlt\nYWdlcy9pbWFnZXMwOAYKKwYBBAGDvzABDQQqDCgyN2Q0NDg3YWI0MTNkNTgzMTAx\nZDAxNWEwYmI2MTA0MjRmOTUzZDM4MB8GCisGAQQBg78wAQ4EEQwPcmVmcy9oZWFk\ncy9tYWluMBkGCisGAQQBg78wAQ8ECwwJNTYzNTEwOTUyMDQGCisGAQQBg78wARAE\nJgwkaHR0cHM6Ly9naXRodWIuY29tL2NoYWluZ3VhcmQtaW1hZ2VzMBkGCisGAQQB\ng78wAREECwwJMTEzMTk4NTQ1MGoGCisGAQQBg78wARIEXAxaaHR0cHM6Ly9naXRo\ndWIuY29tL2NoYWluZ3VhcmQtaW1hZ2VzL2ltYWdlcy8uZ2l0aHViL3dvcmtmbG93\ncy9yZWxlYXNlLnlhbWxAcmVmcy9oZWFkcy9tYWluMDgGCisGAQQBg78wARMEKgwo\nMjdkNDQ4N2FiNDEzZDU4MzEwMWQwMTVhMGJiNjEwNDI0Zjk1M2QzODAYBgorBgEE\nAYO/MAEUBAoMCHNjaGVkdWxlMF4GCisGAQQBg78wARUEUAxOaHR0cHM6Ly9naXRo\ndWIuY29tL2NoYWluZ3VhcmQtaW1hZ2VzL2ltYWdlcy9hY3Rpb25zL3J1bnMvNzYz\nMzQ5NjQyMi9hdHRlbXB0cy8xMBYGCisGAQQBg78wARYECAwGcHVibGljMIGLBgor\nBgEEAdZ5AgQCBH0EewB5AHcA3T0wasbHETJjGR4cmWc3AqJKXrjePK3/h4pygC8p\n7o4AAAGNONNf1gAABAMASDBGAiEAv4w3LP5JmtUHcjmnxNVsBQ/MUADa0o08u2IG\nC+eN3CcCIQDPj5nthxUsLe5KRLEoUFC1xBXaUGR656Go7NsIpbK8djAKBggqhkjO\nPQQDAwNoADBlAjAqe36WQnKMmw+HvOG0Q1p+oIfmCUvTHtRCrNnqhv1CDD8hdkK+\n4Z0ccC807Vhv/nkCMQDckMe3G3VpPq12C38On/zpWd8UPAOjRVJYtPyHS8ncGFeb\n0bAnT4LsZ7z4SIExPuw=\n-----END CERTIFICATE-----\n",
        "dev.sigstore.cosign/chain": "-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----\n",
        "predicateType": "https://spdx.dev/Document"
      }
    }
  ]
}

Image signature

❯ crane manifest cgr.dev/chainguard/python:sha256-4cd9986c4e8c6c5f091a46f38f19b212e0f46a21e8e6e540596f266a123781c2.sig | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
  "config": {
    "mediaType": "application/vnd.docker.container.image.v1+json",
    "size": 233,
    "digest": "sha256:0085e039de99bb4b46512160261aca388f711c5d0f2a0b80b1dd9ac3f2fd6681"
  },
  "layers": [
    {
      "mediaType": "application/vnd.dev.cosign.simplesigning.v1+json",
      "size": 241,
      "digest": "sha256:b9177572915baf0306e530d689ca09cfb567bd8759f1f46799a1f84649c1a9aa",
      "annotations": {
        "dev.cosignproject.cosign/signature": "MEQCIG6jDXHrArtNvkutOURimyciZa3sErA8fC/1SiazfNplAiAtWU9cpMrHtwYdaqPK1aGjOWsI5TjfRfJl8AFkthlS/A==",
        "dev.sigstore.cosign/bundle": "{\"SignedEntryTimestamp\":\"MEUCIQD0FwD/t7M2Kumx81ema0Iou/+WY6yo5TmLYqBuPx+TewIgTe10tO5OgVqfBDr48+zNfQDZuRus/2DwUNNizHwKS5I=\",\"Payload\":{\"body\":\"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\",\"integratedTime\":1706401201,\"logIndex\":67067881,\"logID\":\"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d\"}}",
        "dev.sigstore.cosign/certificate": "-----BEGIN CERTIFICATE-----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\nt4aSYB+oCXVq9l9Naw==\n-----END CERTIFICATE-----\n",
        "dev.sigstore.cosign/chain": "-----BEGIN CERTIFICATE-----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\nmygUY7Ii2zbdCdliiow=\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIIB9zCCAXygAwIBAgIUALZNAPFdxHPwjeDloDwyYChAO/4wCgYIKoZIzj0EAwMw\nKjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MREwDwYDVQQDEwhzaWdzdG9yZTAeFw0y\nMTEwMDcxMzU2NTlaFw0zMTEwMDUxMzU2NThaMCoxFTATBgNVBAoTDHNpZ3N0b3Jl\nLmRldjERMA8GA1UEAxMIc2lnc3RvcmUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAT7\nXeFT4rb3PQGwS4IajtLk3/OlnpgangaBclYpsYBr5i+4ynB07ceb3LP0OIOZdxex\nX69c5iVuyJRQ+Hz05yi+UF3uBWAlHpiS5sh0+H2GHE7SXrk1EC5m1Tr19L9gg92j\nYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRY\nwB5fkUWlZql6zJChkyLQKsXF+jAfBgNVHSMEGDAWgBRYwB5fkUWlZql6zJChkyLQ\nKsXF+jAKBggqhkjOPQQDAwNpADBmAjEAj1nHeXZp+13NWBNa+EDsDP8G1WWg1tCM\nWP/WHPqpaVo0jhsweNFZgSs0eE7wYI4qAjEA2WB9ot98sIkoF3vZYdd3/VtWB5b9\nTNMea7Ix/stJ5TfcLLeABLE4BNJOsQ4vnBHJ\n-----END CERTIFICATE-----"
      }
    }
  ]
}

References:

• chainguard python image
• chainguard OCI 1.1
• gitlab-ci + sigstore
• testifysec: Keyless Signing With Witness and SigStore

docker-image.md

Image Image Version 2, Schema 2

❯ oras manifest fetch docker.io/library/alpine:3.15.5 | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json",
  "manifests": [
    {
      "digest": "sha256:26284c09912acfc5497b462c5da8a2cd14e01b4f3ffa876596f5289dd8eab7f2",
      "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
      "platform": {
        "architecture": "amd64",
        "os": "linux"
      },
      "size": 528
    },
    {
      "digest": "sha256:3a8fe9972387546ebc00e763a75339f40dd5dd09d6f9673ed2b1ec5f611485ea",
      "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
      "platform": {
        "architecture": "arm",
        "os": "linux",
        "variant": "v6"
      },
      "size": 528
    },
    ...
  ]
}

❯ oras manifest fetch docker.io/library/alpine:3.15.5@sha256:26284c09912acfc5497b462c5da8a2cd14e01b4f3ffa876596f5289dd8eab7f2 | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
  "config": {
    "mediaType": "application/vnd.docker.container.image.v1+json",
    "size": 1472,
    "digest": "sha256:2720e26172a023c7245fd2d59f06452cb3743e3c5a26dd102c6a2294e473cdcd"
  },
  "layers": [
    {
      "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
      "size": 2814645,
      "digest": "sha256:ab6db1bc80d0a6df92d04c3fad44b9443642fbc85878023bc8c011763fe44524"
    }
  ]
}

# fetch config
❯ oras blob fetch docker.io/library/alpine:3.15.5@sha256:2720e26172a023c7245fd2d59f06452cb3743e3c5a26dd102c6a2294e473cdcd --output - | jq

{
  "architecture": "amd64",
  "os": "linux",
  "created": "2022-07-19T22:20:11.132913952Z",
  "docker_version": "20.10.12",
  "container": "384375fb0aa007b1ff445ac61e56ad7e206e13922ea20b823615689dd1f77887",
  "rootfs": {
    "type": "layers",
    "diff_ids": [
      "sha256:ad543cd673bd9de2bac48599da992506dcc37a183179302ea934853aaa92cb84"
    ]
  },
  "config": {...}
}

# download layer fs
❯ oras blob fetch docker.io/library/alpine:3.15.5@sha256:ab6db1bc80d0a6df92d04c3fad44b9443642fbc85878023bc8c011763fe44524 --output fs.tar.gz | jq
❯ ls -ahl
-rw-rw-r--  1 dungdm93 dungdm93 2,7M Thg 1  20 23:08 fs.tar.gz

kubewarden-policy.md

KubeWarden Policy

oras manifest fetch ghcr.io/kubewarden/policies/disallow-service-loadbalancer:v0.1.8 | jq

{
  "config": {
    "digest": "sha256:44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
    "mediaType": "application/vnd.wasm.config.v1+json",
    "size": 2
  },
  "layers": [
    {
      "digest": "sha256:e5f1f35832d265788931984bd8085038037008f7a84e32e196c513fc65bd2fc9",
      "mediaType": "application/vnd.wasm.content.layer.v1+wasm",
      "size": 113865
    }
  ],
  "schemaVersion": 2
}

oci-container-image.md

OCI Container Image

❯ oras manifest fetch docker.io/library/nginx:1.25-alpine | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.index.v1+json",
  "manifests": [
    {
      "annotations": {
        "org.opencontainers.image.revision": "4bf0763f4977fff7e9648add59e0540088f3ca9f",
        "org.opencontainers.image.source": "https://github.com/nginxinc/docker-nginx.git#4bf0763f4977fff7e9648add59e0540088f3ca9f:mainline/alpine",
        "org.opencontainers.image.url": "https://hub.docker.com/_/nginx",
        "org.opencontainers.image.version": "1.25.3-alpine"
      },
      "digest": "sha256:2d2a2257c6e9d2e5b50d4fbeb436d8d2b55631c2a89935a425b417eb95212686",
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "platform": {
        "architecture": "amd64",
        "os": "linux"
      },
      "size": 2188
    },
    {
      "annotations": {
        "vnd.docker.reference.digest": "sha256:2d2a2257c6e9d2e5b50d4fbeb436d8d2b55631c2a89935a425b417eb95212686",
        "vnd.docker.reference.type": "attestation-manifest"
      },
      "digest": "sha256:479d37a13424d158cbb1655fdb377c92995c7de0c0e410ada5c5aa84d0e51b36",
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "platform": {
        "architecture": "unknown",
        "os": "unknown"
      },
      "size": 841
    },
    {
      "annotations": {
        "org.opencontainers.image.revision": "4bf0763f4977fff7e9648add59e0540088f3ca9f",
        "org.opencontainers.image.source": "https://github.com/nginxinc/docker-nginx.git#4bf0763f4977fff7e9648add59e0540088f3ca9f:mainline/alpine",
        "org.opencontainers.image.url": "https://hub.docker.com/_/nginx",
        "org.opencontainers.image.version": "1.25.3-alpine"
      },
      "digest": "sha256:e93d95e225274df43b4ba5c77d738f7d88f6ff31b0969e0abfee7201f90cefe8",
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "platform": {
        "architecture": "arm",
        "os": "linux",
        "variant": "v6"
      },
      "size": 2188
    },
    {
      "annotations": {
        "vnd.docker.reference.digest": "sha256:e93d95e225274df43b4ba5c77d738f7d88f6ff31b0969e0abfee7201f90cefe8",
        "vnd.docker.reference.type": "attestation-manifest"
      },
      "digest": "sha256:72bf1649a93cf6a6aeb82a13dfea04c66d76bb5dbe5c53e9b17abbca762864a1",
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "platform": {
        "architecture": "unknown",
        "os": "unknown"
      },
      "size": 567
    },
    ...
  ]
}

Container image

❯ oras manifest fetch docker.io/library/nginx:1.25-alpine@sha256:2d2a2257c6e9d2e5b50d4fbeb436d8d2b55631c2a89935a425b417eb95212686 | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.oci.image.config.v1+json",
    "digest": "sha256:529b5644c430c06553d2e8082c6713fe19a4169c9dc2369cbb960081f52924ff",
    "size": 11719
  },
  "layers": [
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:c926b61bad3b94ae7351bafd0c184c159ebf0643b085f7ef1d47ecdc7316833c",
      "size": 3402422
    },
    ...
  ],
  "annotations": {
    "org.opencontainers.image.revision": "4bf0763f4977fff7e9648add59e0540088f3ca9f",
    "org.opencontainers.image.source": "https://github.com/nginxinc/docker-nginx.git#4bf0763f4977fff7e9648add59e0540088f3ca9f:mainline/alpine",
    "org.opencontainers.image.url": "https://hub.docker.com/_/nginx",
    "org.opencontainers.image.version": "1.25.3-alpine"
  }
}

❯ oras blob fetch docker.io/library/nginx:1.25-alpine@sha256:529b5644c430c06553d2e8082c6713fe19a4169c9dc2369cbb960081f52924ff --descriptor | jq

{
  "mediaType": "application/octet-stream",
  "digest": "sha256:529b5644c430c06553d2e8082c6713fe19a4169c9dc2369cbb960081f52924ff",
  "size": 11719
}

❯ oras blob fetch docker.io/library/nginx:1.25-alpine@sha256:529b5644c430c06553d2e8082c6713fe19a4169c9dc2369cbb960081f52924ff --output - | jq

{
  "architecture": "amd64",
  "os": "linux",
  "created": "2023-10-24T22:44:45Z",
  "rootfs": {
    "type": "layers",
    "diff_ids": [
      "sha256:9fe9a137fd002363ac64f5af66146702432b638a83ee0c5b620c40a9e433e813",
      "sha256:3d49ee199a5cb2b4cc307d0fdeef73552bd721f04ebdc2686acaab0f8c61b5e7",
      "sha256:c612d245f985ffb798f0a519166c1c1b5d7de0e909e79c795ebbc576a5f604c0",
      "sha256:4c6b2fc6378f5a3e19a0ef34085e26a94d6c8a6c97bc89e02269430692137322",
      "sha256:769b844042ad670b931d80c74efe457534b6e79691b2bb228c12a35d76418e8d",
      "sha256:62e59aa00d24559fcc3c25b4ab11ecfa604e3b9bc8f0511313a607379479ee6b",
      "sha256:9770295d804c10a23d05802a40062615cc41a4e6ab7a0cbbb540ef8946a081e5",
      "sha256:2d33248ce9da830242ec5e33516ccc239ea3de30b3dfb9a9af0aa4c7314bcad5"
    ]
  }
  "config": {...}
  "history": [...]
}

Attestation

❯ oras manifest fetch docker.io/library/nginx:1.25-alpine@sha256:479d37a13424d158cbb1655fdb377c92995c7de0c0e410ada5c5aa84d0e51b36 | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.oci.image.config.v1+json",
    "digest": "sha256:f3db3c56f1b7e11ad18173a504873ad17c04872868cff113e76ead80c88d4b02",
    "size": 241
  },
  "layers": [
    {
      "mediaType": "application/vnd.in-toto+json",
      "digest": "sha256:1f307444586061d6e1fc98380c6a07234898dbdb7c03c29acea911853276246f",
      "size": 1034605,
      "annotations": {
        "in-toto.io/predicate-type": "https://spdx.dev/Document"
      }
    },
    {
      "mediaType": "application/vnd.in-toto+json",
      "digest": "sha256:d1d6aac78f1b7502e187f857b16079a8324d68bdfed0e51796e36b77a378b789",
      "size": 24057,
      "annotations": {
        "in-toto.io/predicate-type": "https://slsa.dev/provenance/v0.2"
      }
    }
  ]
}

SBOM SPDX

oras blob fetch docker.io/library/nginx:1.25-alpine@sha256:1f307444586061d6e1fc98380c6a07234898dbdb7c03c29acea911853276246f --output - | jq | less

{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://spdx.dev/Document",
  "subject": [
    {
      "name": "pkg:docker/nginx@1.25.3-alpine?platform=linux%2Famd64",
      "digest": {
        "sha256": "2d2a2257c6e9d2e5b50d4fbeb436d8d2b55631c2a89935a425b417eb95212686"
      }
    },
    {
      "name": "pkg:docker/nginx@mainline-alpine?platform=linux%2Famd64",
      "digest": {
        "sha256": "2d2a2257c6e9d2e5b50d4fbeb436d8d2b55631c2a89935a425b417eb95212686"
      }
    },
    ...
  ],
  "predicate": {
    "spdxVersion": "SPDX-2.3",
    "dataLicense": "CC0-1.0",
    "SPDXID": "SPDXRef-DOCUMENT",
    "name": "sbom",
    "documentNamespace": "https://docker.com/docker-scout/fs/sbom-c74553c4-8ab9-42de-ac1b-0ef18f6fa1c6",
    "creationInfo": {
      "creators": [
        "Organization: Docker, Inc",
        "Tool: docker-scout-1.2.2",
        "Tool: buildkit-v0.0.0+unknown"
      ],
      "created": "2023-12-20T22:11:57Z"
    },
    "packages": [
      {
        "name": "alpine-baselayout-data",
        "SPDXID": "SPDXRef-Package-0889846195aae36d01792e86d2069856",
        "versionInfo": "3.4.3-r1",
        "supplier": "Person: Natanael Copa \\u003cncopa@alpinelinux.org\\u003e",
        "originator": "Person: Natanael Copa \\u003cncopa@alpinelinux.org\\u003e",
        "downloadLocation": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout",
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "GPL-2.0-only",
        "description": "Alpine base dir structure and init scripts",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceType": "purl",
            "referenceLocator": "pkg:apk/alpine/alpine-baselayout-data@3.4.3-r1?os_name=alpine&os_version=3.18"
          }
        ]
      },
      ...
    ],
    "files": [
      {
        "fileName": "/bin/busybox",
        "SPDXID": "SPDXRef-File-10745d1c15fc18d18d3ad511d04882db",
        "checksums": [
          {
            "algorithm": "SHA1",
            "checksumValue": "0000000000000000000000000000000000000000"
          }
        ],
        "licenseConcluded": "NOASSERTION",
        "copyrightText": "",
        "comment": "layerID: sha256:c926b61bad3b94ae7351bafd0c184c159ebf0643b085f7ef1d47ecdc7316833c"
      },
      {
        "fileName": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub",
        "SPDXID": "SPDXRef-File-4e58a4acd8e2941d3fc10223fd6fa5ac",
        "checksums": [
          {
            "algorithm": "SHA1",
            "checksumValue": "0000000000000000000000000000000000000000"
          }
        ],
        "licenseConcluded": "NOASSERTION",
        "copyrightText": "",
        "comment": "layerID: sha256:c926b61bad3b94ae7351bafd0c184c159ebf0643b085f7ef1d47ecdc7316833c"
      },
      ...
    ],
    "relationships": [
      {
        "spdxElementId": "SPDXRef-DOCUMENT",
        "relatedSpdxElement": "SPDXRef-DOCUMENT",
        "relationshipType": "DESCRIBES"
      },
      {
        "spdxElementId": "SPDXRef-Package-0889846195aae36d01792e86d2069856",
        "relatedSpdxElement": "SPDXRef-File-ad942c725cd0cae65ca4c63717ec464c",
        "relationshipType": "CONTAINS"
      },
      ...
    ],
  }
}

SLSA Provenance

oras blob fetch docker.io/library/nginx:1.25-alpine@sha256:d1d6aac78f1b7502e187f857b16079a8324d68bdfed0e51796e36b77a378b789 --output - | jq | less

{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://slsa.dev/provenance/v0.2",
  "subject": [
    {
      "name": "pkg:docker/nginx@1.25.3-alpine?platform=linux%2Famd64",
      "digest": {
        "sha256": "2d2a2257c6e9d2e5b50d4fbeb436d8d2b55631c2a89935a425b417eb95212686"
      }
    },
    {
      "name": "pkg:docker/nginx@mainline-alpine?platform=linux%2Famd64",
      "digest": {
        "sha256": "2d2a2257c6e9d2e5b50d4fbeb436d8d2b55631c2a89935a425b417eb95212686"
      }
    },
    ...
  ],
  "predicate": {
    "builder": {
      "id": ""
    },
    "buildType": "https://mobyproject.org/buildkit@v1",
    "materials": [
      {
        "uri": "pkg:docker/docker/dockerfile@1?digest=sha256:ac85f380a63b13dfcefa89046420e1781752bab202122f8f50032edf31be0021&platform=linux%2Famd64",
        "digest": {
          "sha256": "ac85f380a63b13dfcefa89046420e1781752bab202122f8f50032edf31be0021"
        }
      },
      {
        "uri": "pkg:docker/docker/scout-sbom-indexer@1?digest=sha256:c2c2236a08a5e4efdc0a983ffcf0971911d22ed5238db4be40dadb6078286c10",
        "digest": {
          "sha256": "c2c2236a08a5e4efdc0a983ffcf0971911d22ed5238db4be40dadb6078286c10"
        }
      },
      {
        "uri": "pkg:docker/oisupport/staging-amd64@80eb2af8b0ce08a4f14c288f5d32aa1e8bddb23605d01e36c97e856bd97fdc66?digest=sha256:a3612cfdeb39a0715f0a6100157f3edde0d2eb27226c2b8bd614d52538f5eb78&platform=linux%2Famd64",
        "digest": {
          "sha256": "a3612cfdeb39a0715f0a6100157f3edde0d2eb27226c2b8bd614d52538f5eb78"
        }
      },
      {
        "uri": "https://github.com/nginxinc/docker-nginx.git#4bf0763f4977fff7e9648add59e0540088f3ca9f",
        "digest": {
          "sha1": "4bf0763f4977fff7e9648add59e0540088f3ca9f"
        }
      }
    ],
    "invocation": {...},
    "buildConfig": {...},
  }
}

oci-helm.md

OCI Helm Chart

❯ oras manifest fetch docker.io/bitnamicharts/nginx:15.9.0 | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.cncf.helm.config.v1+json",
    "digest": "sha256:727ee0b72e94f54a9bf4dd7b9baffca18a1eecec3d129b7ca49515ca79996d7a",
    "size": 1032
  },
  "layers": [
    {
      "mediaType": "application/vnd.cncf.helm.chart.content.v1.tar+gzip",
      "digest": "sha256:3b3724b9a517e86f19ed1b13195f6edf80deed8426d9cdca32950a767c722033",
      "size": 41023,
      "annotations": {
        "org.opencontainers.image.title": "nginx-15.9.0.tgz"
      }
    }
  ]
}

❯ oras blob fetch docker.io/bitnamicharts/nginx:15.9.0@sha256:727ee0b72e94f54a9bf4dd7b9baffca18a1eecec3d129b7ca49515ca79996d7a --output - | jq

{
  "annotations": {
    "category": "Infrastructure",
    "images": "- name: git\n  image: docker.io/bitnami/git:2.43.0-debian-11-r5\n- name: nginx-exporter\n  image: docker.io/bitnami/nginx-exporter:1.1.0-debian-11-r0\n- name: nginx\n  image: docker.io/bitnami/nginx:1.25.3-debian-11-r4\n",
    "licenses": "Apache-2.0"
  },
  "apiVersion": "v2",
  "appVersion": "1.25.3",
  "dependencies": [
    {
      "name": "common",
      "repository": "oci://registry-1.docker.io/bitnamicharts",
      "tags": [
        "bitnami-common"
      ],
      "version": "2.x.x"
    }
  ],
  "description": "NGINX Open Source is a web server that can be also used as a reverse proxy, load balancer, and HTTP cache. Recommended for high-demanding sites due to its ability to provide faster content.",
  "home": "https://bitnami.com",
  "icon": "https://bitnami.com/assets/stacks/nginx/img/nginx-stack-220x234.png",
  "keywords": [
    "nginx",
    "http",
    "web",
    "www",
    "reverse proxy"
  ],
  "maintainers": [
    {
      "name": "VMware, Inc.",
      "url": "https://github.com/bitnami/charts"
    }
  ],
  "name": "nginx",
  "sources": [
    "https://github.com/bitnami/charts/tree/main/bitnami/nginx"
  ],
  "version": "15.9.0"
}

❯ oras blob fetch docker.io/bitnamicharts/nginx:15.9.0@sha256:3b3724b9a517e86f19ed1b13195f6edf80deed8426d9cdca32950a767c722033 --output chart.tar.gz
❯ ls -ahl
-rw-rw-r--  1 dungdm93 dungdm93  41K Thg 1  21 00:10 chart.tar.gz

ollama.md

ollama OCI

❯ oras manifest fetch registry.ollama.ai/library/llava:7b | jq

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
  "config": {
    "mediaType": "application/vnd.docker.container.image.v1+json",
    "digest": "sha256:7c658f9561e5dbbafb042a00f6a4de57877adddd957809111f3123e272632b4d",
    "size": 564
  },
  "layers": [
    {
      "mediaType": "application/vnd.ollama.image.model",
      "digest": "sha256:170370233dd5c5415250a2ecd5c71586352850729062ccef1496385647293868",
      "size": 4108916992
    },
    {
      "mediaType": "application/vnd.ollama.image.projector",
      "digest": "sha256:72d6f08a42f656d36b356dbe0920675899a99ce21192fd66266fb7d82ed07539",
      "size": 624434368
    },
    {
      "mediaType": "application/vnd.ollama.image.license",
      "digest": "sha256:43070e2d4e532684de521b885f385d0841030efa2b1a20bafb76133a5e1379c1",
      "size": 11356
    },
    {
      "mediaType": "application/vnd.ollama.image.template",
      "digest": "sha256:c43332387573e98fdfad4a606171279955b53d891ba2500552c2984a6560ffb4",
      "size": 67
    },
    {
      "mediaType": "application/vnd.ollama.image.params",
      "digest": "sha256:ed11eda7790d05b49395598a42b155812b17e263214292f7b87d15e14003d337",
      "size": 30
    }
  ]
}