Support copy of images and associated references

[sajayantony]

The current copy implementation moves a source artifact to a target. The library needs to support moving references to support the following options

• [ ] copy all references and graph of objects
• [ ] Filter references through matching a given artifacType e.g. artifactType=sbom/example
• [ ] Support excluding references of a given artifact type
• [ ] Support filter through matching annotation
• [ ] support excluding artifacts with specified annotation
• [ ] support tag update deferment where the source artifact and references are copied by digests, then the tag is applied as the last step. This supports adding a signature to the source, and it's the only new thing that must be copied and put in sync

Examples

• Copy with specific references, included

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
  registry.acme-rockets.io/library/net-monitor:v1 \
  -r \
  -m application/vnd.cncf.notary.v2 \
  -m sbom/example

• Copy with specific references, excluded

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
  --destination registry.acme-rockets.io/library/net-monitor:v1 \
  -r \
  -x sbom/example

• Copy with specific references, included, filtered by annotation (inclusion)

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
  -r \
  -m application/vnd.cncf.notary.v2 \
  --match-annotation "org.cncf.notary.v2.signature.subject=acme-rockets.io"

• Copy with specific references, included, filtered by annotation (exclusion)

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
  -r \
  -m application/vnd.cncf.notary.v2 \
  --exclude-annotation "org.cncf.notary.v2.signature.subject=wabbit-networks.io"

[juliusl]

--match-annotation does this imply pattern matching i.e. regex filter?

[sajayantony]

From a library perspective I think enabling regex/re2 support might all that is needed. CLI and other consumers can decided to expose or hide the complexity of accepting just strings or raw patterns.

[sajayantony]

CLI issue is captured here - oras-project/oras#307

[Wwwsylvia]

• Copy all references and graph of objects This is tracked by #53 and is done.
• Filter references through matching a given artifacType e.g. artifactType=sbom/example This is tracked by #201
• Support excluding references of a given artifact type This is tracked by #201
• Support filter through matching annotation This is tracked by #203
• support excluding artifacts with specified annotation This is tracked by #203
• support tag update deferment where the source artifact and references are copied by digests, then the tag is applied as the last step. This supports adding a signature to the source, and it's the only new thing that must be copied and put in sync This is tracked by #52 and is done

[shizhMSFT]

Closing as tracked by #201 and #203