Open hanikesn opened 1 year ago
Interesting suggestion, I do believe based on the name of this ruleset and the scope we've indicated in the past, that we want to fully support the official OCI specs.
Unfortunately I didn't have time to look into this yet, but wanted to highlight argocd's initative to support oci artifacts:
With 2.0, we are going to start using https://github.com/regclient/regclient/blob/main/docs/regctl.md which supports OCI artifacts.
We might consider supporting it after 2.0.
rules_oci
provides good support for OCI images already. Other OCI artifacts like helm charts and ORAS are becoming more and more popular. A natural extension forrules_oci
is adding support for building and pushing generic OCI artifacts. To keep the scope limited it's sufficient to support the OCI Distribution Spec/OCI Artifacts Spec and leave application specifics up to 3rd party rules.If support for OCI artifacts is in scope for
rules_oci
then I'd be happy for some pointers so I can start with a POC. It certainly looks like zot supports generic OCI artifacts already.