Justin Chadwell

PTAL @tonistiigi @crazy-max @thaJeztah

LGTM (assuming CI passes) :tada: PTAL @tonistiigi

A couple reasons: - Something like this would be required to implement https://github.com/docker/buildx/pull/1197 in the way it's currently done, though that might easily change. - API consistency - a user...

> You could just call like a Statfile("/") That definitely works, but it would need to be called per-ref, so a result that has multiple platforms, would need a trip...

@smira are you still looking at this? I can take a look if not.

Sounds good, I'll take a look :+1: I've also managed to replicate a similar (but I don't think identical) scenario using `fsutil.Receive` where files are created in the directory after...

This seems related to #1853 :eyes:

@coryb could you also confirm you'd be happy to be added as a co-author on the relevant import commits? @hinshun is there a particular email address you'd like? In the...

Should be ready now: - @coryb and @hinshun added as co-authors - Comments resolved - Diagrams converted to mermaid to easily view in-browser

I think the option to let users generate their own SBOMs how they want is probably quite important. We're also looking at how in-toto attestations might be generated and collected...