Safeguard
Tag

oci-image-spec

Safeguard articles tagged "oci-image-spec" — guides, analysis, and best practices for software supply chain and application security.

1 article

Container Security

OCI Image Labels and Annotations: A Practical Guide to Provenance and SBOM Linkage

OCI defines 14 standard org.opencontainers.image.* annotation keys, but labels are unsigned metadata — anyone with build access can forge them.

Jul 16, 20266 min read
oci-image-spec — Safeguard Blog