Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: None
Affects Version/s: quay-v3.12.0
Component/s: quay
Labels:
- quay.io
- triaged

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Intelligence Requested:
Market:

SFDC Cases Links:
SFDC Cases Open:
SFDC Cases Counter:

Description:

This is an issue found when checking OCI List Referrers in quay.io env, found Quay List Referrers V2 API can't return the annotations and artifact type, pls review this issue.

OCI Spec: https://github.com/opencontainers/distribution-spec/blob/main/spec.md#listing-referrers

Quay: quay.io

skopeo inspect docker://quay.io/lzha/ocilistreferrs:sha256-0de63ba2d98ab328218a1b6373def69ec0d0e7535866f50589111285f2bf3fb8  --raw | jq 
{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.index.v1+json",
  "manifests": [
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:342bba778f804eb916006c952ebb51d281d0d4f982bd9fc1d4a120eef4075166",
      "size": 793,
      "annotations": {
        "org.opencontainers.image.created": "2024-07-15T04:57:32Z",
        "producer": "syft 0.63.0"
      },
      "artifactType": "application/spdx+json"
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:814a632fddc16a7ad93a714691cf8429375c9a15bab0d2f14be449cc8f7bd9eb",
      "size": 776,
      "annotations": {
        "org.opencontainers.image.created": "2024-07-15T04:58:14Z",
        "producer": "syft 0.63.0"
      },
      "artifactType": "text/spdx"
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:f195f9f73b0e30aab9014237d3a5f25a42673b072956d03215c984dfb4ee2a6f",
      "size": 806,
      "annotations": {
        "org.opencontainers.image.created": "2024-07-15T04:58:43Z",
        "producer": "syft 0.63.0"
      },
      "artifactType": "application/vnd.cyclonedx+json"
    }
  ]
}

curl --location 'https://quay.io/v2/lzha/ocilistreferrs/referrers/sha256:0de63ba2d98ab328218a1b6373def69ec0d0e7535866f50589111285f2bf3fb8' \
--header 'Authorization: Bearer ******' | jq
{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.index.v1+json",
  "manifests": [
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:342bba778f804eb916006c952ebb51d281d0d4f982bd9fc1d4a120eef4075166",
      "size": 793
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:814a632fddc16a7ad93a714691cf8429375c9a15bab0d2f14be449cc8f7bd9eb",
      "size": 776
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:f195f9f73b0e30aab9014237d3a5f25a42673b072956d03215c984dfb4ee2a6f",
      "size": 806
    }
  ]
}