Ben Meier

This will need changes in github.com/score-spec/score-go.

I've cut https://github.com/score-spec/score-go/pull/42 to improve this in score-go

@lekaf974 actually still neede some work here https://github.com/score-spec/score-compose/pull/241 but can close after this.

@mathieu-benoit how would that work? What would the archive format be inside the image and how would users create an image file with a single yaml file inside it?

Why is this better than just an https url?

Ah ok I see so this is a common pattern used in `oras` 👍 . So `score-k8s init --provisioners oci://reg/name:tag` would be fairly equivalent to ``` score-k8s init oras pull...

Also note: This would import ALL the files from that oci reference: all provisioner files and possibility utility scripts as needed.

@7h3-3mp7y-m4n personally I'd prefer we go further an add golangci-lint with a config like ``` version: "2" linters: default: standard enable: - bodyclose - contextcheck - goconst - gosec -...

@7h3-3mp7y-m4n @mathieu-benoit yes, we can remove vet if we're using the new linter.

I've been looking at solving this in a system I run today. Currently, the next best thing we have is to have a process monitor the CA bundle on disk...