OCI Artifact Manifest - with weak reference support

artifact-manifest/artifact-manifest-mysql-image-sbom copy.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+  "artifactType": "application/vnd.openssf.sbom.v1+json",
+  "config": {
+    "mediaType": "application/vnd.openssf.sbom.config.v1+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 102
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [
+    {
+      "mediaType": "application/vnd.oci.image.manifest.v1+json",
+      "digest": "sha256:3c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c6b",
+      "size": 16724
+    }
+  ],
+  "references": [],
+  "annotations": {
+    "openssf.sbom.author": "mysql"
+  }
+}

artifact-manifest/artifact-manifest-mysql-image-sbom.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+  "artifactType": "application/vnd.openssf.sbom.v1",
+  "config": {
+    "mediaType": "application/vnd.openssf.sbom.config.v1+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 102
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [
+    {
+      "mediaType": "application/vnd.oci.image.config.v1+json",
+      "digest": "sha256:3c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c6b",
+      "size": 16724
+    }
+  ],
+  "references": [],
+  "annotations": {
+    "openssf.sbom.author": "mysql"
+  }
+}

artifact-manifest/artifact-manifest-mysql-image-signature.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+  "artifactType": "application/vnd.cncf.notary.v2+json",
+  "config": {
+    "mediaType": "application/vnd.cncf.notary.config.v2+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 102
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [
+    {
+      "mediaType": "application/vnd.oci.image.manifest.v1+json",
+      "digest": "sha256:3c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c6b",
+      "size": 16724
+    }
+  ],
+  "references": [],
+  "annotations": {
+    "org.cncf.notary.v2.signature.subject": "docker.io"
+  }
+}

artifact-manifest/artifact-manifest-wordpress-cnab-signature copy.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+  "artifactType": "application/vnd.cncf.notary.v2+json",
+  "config": {
+    "mediaType": "application/vnd.cncf.notary.config.v2+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 1303
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [
+    {
+      "mediaType": "application/vnd.oci.image.index.v1.config+json",
+      "digest": "sha256:3c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c6b",
+      "size": 16724
+    }
+  ],
+  "annotations": {
+    "org.cncf.notary.v2.signature.subject": "docker.io"
+  }
+}

artifact-manifest/artifact-manifest-wordpress-cnab-signature.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+  "artifactType": "application/vnd.cncf.notary.v2+json",
+  "config": {
+    "mediaType": "application/vnd.cncf.notary.config.v2+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 1303
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [
+    {
+      "mediaType": "application/vnd.oci.image.index.v1.config+json",
+      "digest": "sha256:3c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c6b",
+      "size": 16724
+    }
+  ],
+  "annotations": {
+    "org.cncf.notary.v2.signature.subject": "docker.io"
+  }
+}

artifact-manifest/artifact-manifest-wordpress-cnab..json

@@ -0,0 +1,37 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+  "artifactType": "application/vnd.cncf.cnab.v1+json.",
+  "config": {
+    "mediaType": "application/vnd.cncf.cnab.config.v1+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 134
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [],
+  "references": [
+    {
+      "mediaType": "application/vnd.oci.image.manifest.v1+json",
+      "digest": "sha256:8c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c31",
+      "size": 1578,
+      "annotations": {
+        "oci.distribution.artifact": "helm-cli:3"
+      }
+    },
+    {
+      "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+      "digest": "sha256:5c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c82",
+      "size": 1510,
+      "annotations": {
+        "oci.distribution.artifact": "wordpress-chart:v5"
+      }
+
+    }
+  ]
+}

artifact-manifest/artifact-manifest-wordpress-helm.json

@@ -0,0 +1,36 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.manifest.v1+json",
+  "artifactType": "application/vnd.cncf.helm.v3+json",
+  "config": {
+    "mediaType": "application/vnd.cncf.helm.config.v1+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 0
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [],
+  "references": [
+    {
+      "mediaType": "application/vnd.oci.image.manifest.config.v1+json",
+      "digest": "sha256:5c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c82",
+      "size": 1510,
+      "annotations": {
+        "oci.distribution.artifact": "wordpress:5.7"
+      }
+    },
+    {
+      "mediaType": "application/vnd.oci.image.manifest.config.v1+json",
+      "digest": "sha256:8c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c31",
+      "size": 1578,
+      "annotations": {
+        "oci.distribution.artifact": "mysql:8"
+      }
+    }
+  ]
+}

artifact-manifest/artifact-manifest-wordpress-image-signature.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "mediaType": "application/vnd.oci.artifact.collection.v1+json",
+  "artifactType": "application/vnd.cncf.notary.v2+json",
+  "config": {
+    "mediaType": "application/vnd.cncf.notary.config.v2+json",
+    "digest": "sha256:b5b2b2c507a0944348e0303114d8d93aaaa081732b86451d9bce1f432a537bc7",
+    "size": 120
+  },
+  "blobs": [
+    {
+      "mediaType": "application/tar",
+      "digest": "sha256:9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0",
+      "size": 32654
+    }
+  ],
+  "manifests": [
+    {
+      "mediaType": "application/vnd.oci.image.index.v1.config+json",
+      "digest": "sha256:3c3a4604a545cdc127456d94e421cd355bca5b528f4a9c1905b15da2eb4a4c6b",
+      "size": 16724
+    }
+  ],
+  "references": [],
+  "annotations": {
+    "org.cncf.notary.v2.signature.subject": "docker.io"
+  }
+}