Billy Zha

@FeynmanZhou @yizha1 Can you engage oras users to get more valuable scenarios for E2E tests, thanks.

Closing this, will add another PR for testing utilities

@shizhMSFT Can you assign this to me, thanks.

The work items of E2E tests are listed out as below: # Infrastructure - [x] https://github.com/oras-project/oras/issues/552 - [x] Sample Image/Artifacts data files - [x] https://github.com/oras-project/oras/issues/553 - [x] https://github.com/oras-project/oras/issues/646 - [...

It has nothing to do with SBOM. `oras attach` will generate an [oras artifact manifest](https://github.com/oras-project/artifacts-spec/blob/main/artifact-manifest.md#oras-artifact-manifest-spec), which is not supported by docker registry.

The headers will be consumed by registry service. Below are some examples for Azure Container Registry: 1) [X-Meta-Source-Client]( https://github.com/Azure/acr/blob/main/docs/http-headers.md#azure-container-registry-http-headers): tells the service provider who is using the registry service. 2)...

@milosgajdos This is a known issue (https://github.com/oras-project/oras/issues/447 and https://github.com/oras-project/oras-go/issues/239) for 0.13.0. It has been fixed in the main branch but we haven't released a new version(0.14.0) yet.

What benefit can an user get from this multi-deleting? If this command breaks halfway, can user rerun the same command?

> Add an annotation to an existing manifest > Put the new manifest > Delete the old manifest by digest so that we don’t have a dangling manifest but maybe...

Why the example has a docker layout file `manifest.json`?