On Sat, Apr 18, 2026 at 12:56:12PM +0200, Denis Fondras wrote:
> ORAS is the de facto tool for working with OCI Artifacts. It treats
> media types as a critical piece of the puzzle. Container images are
> never assumed to be the artifact in question. ORAS provides CLI and
> client libraries to distribute artifacts across OCI-compliant
> registries.
> 
> * Artifact Reference
> - Attach supply chain artifacts to container images.
> - Discover and show the artifact reference relations.
> - Extend the registries not just for storing container images.
> 
> * Distributed Software Artifacts
> - Manage artifacts in OCI registries.
> - Migrate artifacts across registries.
> - Manage artifacts in file system through OCI image layout.
> 
> * Explore and Manage OCI Image
> - Manage image manifest and layer in an OCI registry.
> - Operate tag and repository in an OCI registry.
> - Explore the detailed content of an OCI image.
> 
> https://oras.land
> 
ok lraab@ as-is. There's a very, very minor update 1.3.2 (attached)
which pretty much only bumps the supported go version to 1.26.2. It's
the most recent version though so *shrug*. Feel free to claim that
as your own, all I did was move the version one louder. :)

Lucas

• oras.tgz (6K)