Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/opencontainers/artifacts

OCI Artifacts
https://github.com/opencontainers/artifacts

containers oci

Last synced: 3 months ago
JSON representation

OCI Artifacts

Awesome Lists containing this project

README

        

# OCI Artifacts

> ## ⚠️This repository has been archived and is no longer maintained. ⚠️

For current OCI Artifact guidance, please see:
- image-spec: [artifacts guidance documentation](https://github.com/opencontainers/image-spec/blob/main/artifacts-guidance.md)
- distribution-spec: [referrers API](https://github.com/opencontainers/distribution-spec/blob/main/spec.md#enabling-the-referrers-api)

## OCI Artifacts Converges with Image and Distribution Specs

OCI Artifacts started in 2019 with [PRs to the Image](https://github.com/opencontainers/image-spec/pull/770) and the [Distribution specs](https://github.com/opencontainers/distribution-spec/pull/65). In September of 2019, the TOB voted to create the [New OCI Artifacts Project](https://opencontainers.org/posts/blog/2019-09-10-new-oci-artifacts-project/), generalizing the deployed container registry infrastructure to serve ecosystems of new artifacts. Artifact Authors no longer needed to create, nor host new package managers. By leveraging existing public and private registries, artifact authors benefit from the reliability, performance and security benefits users already manage.

In 2020, early supply chain security initiatives were evolving, requiring the addition of [reference information to existing artifacts (#29)](https://github.com/opencontainers/artifacts/pull/29), including signatures, Software Bill of Materials (SBOM), and new developing types.

We're happy to see the journey completed with the Image and Distribution specs formalizing the addition of OCI Artifacts and Reference Types. With the [Image 1.1](https://github.com/opencontainers/image-spec/releases), and [Distribution 1.1 releases](https://github.com/opencontainers/distribution-spec/releases), the effort has come full circle, making it time to archive the OCI Artifacts project.

The previous OCI Artifacts content is available in the [pre-archive branch](https://github.com/opencontainers/artifacts/tree/pre-archive)

## Project License

- [The Apache License, Version 2.0](LICENSE)

## Code of Conduct

This project incorporates (by reference) the OCI [Code of Conduct](https://github.com/opencontainers/.github/blob/master/CODE_OF_CONDUCT.md)

## Governance and Releases

This project incorporated the Governance and Releases processes from the OCI project template: https://github.com/opencontainers/project-template.