docker
Support Referrers API in OCI 1.1
Tell us about your request
I hope Docker Hub can support the Referrers API described in OCI 1.1.
Which service(s) is this request for?
Docker Hub.
Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?
I wish to use Cosign without littering sha256-... tags around. The new Referrers API is designed to include such information directly in manifests so that tag littering can be avoided.
Are you currently working around the issue?
OCI 1.1 itself specified a workaround that is essentially the current practice of littering sha256-... tags.
Additional context
Docker Hub developers previously expressed a preference to wait for the finalization of OCI 1.1 before implementing the Referrers API, and OCI 1.1 just got finalized earlier this year. :grinning:
