Brandon Mitchell

For getting involved with the process, issues and PR's are welcome on the [working group repo](https://github.com/opencontainers/wg-reference-types) and details on our weekly meetings are over there too.

@tonistiigi could there be an option to allow users to generate their own SBOMs? ``` FROM compiler:latest as build COPY . /src RUN do install stuff FROM build as sbom-generate...

Thinking through @jedevc's example, I really like the idea of a different kind of mount. I'd just make it slightly more generic, which would give buildx the ability to use...

For what it's worth, we allow "sparse indexes" to be on the registry today via some convoluted means of copying the entire set of images and index, and then deleting...

How do we envision this change rolling out through the ecosystem? I'm assuming the fallback is storing and/or transmitting uncompressed blobs. Will this only be used for new use cases...

> @sudo-bmitch > I couldn't find the part of the spec that says that the artifact type may be missing, I wanted to link to it. Can you confirm which...

I think GC can use a rewrite in general. It's not safe to run on active servers, and the tagged check isn't recursive through manifest list to manifest. In other...

See #3178 for details on the multi platform GC. The code itself is pretty straightforward and the issues seem baked into the design.

How would a client know what API to use to request and parse the response from an arbitrary digest? Do clients need to maintain a list of manifest media types...

> You couldn't create this loop without a random guess of the hash. Unless you're meaning something else entirely. This does not sound like a real issue. @vbatts Here's a...