Image Notes and Occurrences in Grafeas Model

note.json

{
  "name": "/projects/images/notes/rhel7_7.14",
  "shortDescription": "Base image note for RHEL 7 7.14",
  "longDescription": "",
  "kind": "baseImage",
  "relatedUrl": [
    {
      "url": "",
      "label": "Artifactory URL",
    }
  ],
  "createTime": "2017-06-15T15:28:40.142107Z",
  "updateTime": "2017-06-15T15:28:40.142107Z",
  "relatedNoteNames": [
    "string"  //If we want to add more relevant data like team? build system?
  ],
  "baseImage": {
    "resourceUrl": "",
    "fingerprint": {
      "v1Name": "The layer ID of the final layer in the Docker image's v1 representation",
    "v2Blob": [
      "The ordered list of v2 blobs that represent a given image"
    ]
  }
}

occurrence.json

{
  "name": "projects/images/occurrences/randomID",
  "resourceUrl": { 
    "uri": "https://myregistry/image@sha256:hash",
  },
  "noteName": "/projects/images/notes/rhel7_7.14", // All the images derived from rhel 7 7.14
  "kind": "IMAGE",
  "createTime": "2017-06-15T15:28:40.142107Z",
  "derivedImage": {
      "fingerprint": {
        "resourceUrl": "",
        "fingerprint": {
          "v1Name": "The layer ID of the final layer in the Docker image's v1 representation",
        "v2Blob": [
          "The ordered list of v2 blobs that represent a given image"
        ]
      },
      "distance": 4, //The number of layers by which this image differs from the associated image basis
      "layerInfo": [
        {
          "directive": enum (Directive), // each of the Dockerfile lines
          "arguments": string            // we don't really need to duplicate the Dockerfile here
        }
      ],
      "baseResourceUrl": "https://myregistry/image@sha256:hash"
    }
  }
}