Open Container Initiative (OCI) is responsible for multiple specifications:
OCI is slowly replacing Docker media types
Version 1.1 is in the making
Distribution spec 1.1.0-rc.2 adds referrers
Referrers add relationships between digests
Implementations: regclient, trivy, oras, distribution, cosign
Upload demo image
Link SBOM
Link SARIF report (repeat daily)
Sign image
Sign SBOM
Sign SARIF