Sajay Antony

Oras needs to consume RC2 since it includes the subject field - https://github.com/opencontainers/image-spec/pull/958

On the call today we discussed that the fall back to ORAS is not going to be supported. This issues needs to be updated to reflect that and the next...

~~I think digest pinned deployments will never see an updated scan report if we use the index to constantly append and recompose the images. This was my reason for supporting...

I would recommend adding a section to this https://github.com/notaryproject/notaryproject/blob/main/signature-specification.md#storage with annotations. Also, it is currently a bit confusing since there are annotations in the Payload and annotations in the manifest...

@shizhMSFT we might need to bring this issue up during the call. It hasn't seen much traction.

Could we consider aligning this with commands like `manifest fetch` ? Could you also describe what is the advantage of outputting these to a file instead of stdout and maybe...

I think even attach might have an issue until Docker supports the subject property in an image manifest. I think oras CLI might need a way to skip putting the...

@akashsinghal - it might be good to share the implementation design and details which you have been working on at - https://github.com/oci-playground/distribution

Maybe you can post a comment with the option of NO so that folks can vote for yes or No. my vote is no and let someone from the community...

+1 on this. I would like to propose an amend command that would 1. Add an annotation to an existing manifest 2. Put the new manifest 3. Delete the old...