Skip to content

chore: add OCI standard labels to Dockerfile#309

Merged
lissy93 merged 2 commits into
lissy93:masterfrom
Erwan-loot:chore/add-oci-labels
May 22, 2026
Merged

chore: add OCI standard labels to Dockerfile#309
lissy93 merged 2 commits into
lissy93:masterfrom
Erwan-loot:chore/add-oci-labels

Conversation

@Erwan-loot
Copy link
Copy Markdown
Contributor

Context

The Docker images published by this project (ghcr.io/lissy93/web-check, docker.io/lissy93/web-check) are missing standard OCI Image Spec labels. Adding these improves:

  • Dependency bot changelogs: Renovate and Dependabot use org.opencontainers.image.source to locate and display changelogs/release notes in update PRs
  • Registry UI: GHCR and Docker Hub display OCI labels (description, license, source link) in their web interface
  • Security scanning: Tools like Trivy and Grype use source and revision for image provenance
  • Image traceability: version, revision, and created enable precise build auditing

Type

Improvement — metadata only, no functional changes.

Labels Added

Label Value Source
org.opencontainers.image.title Web-Check Static (Dockerfile) + auto-generated (CI)
org.opencontainers.image.description All-in-one OSINT tool for analysing any website Static (Dockerfile) + auto-generated (CI)
org.opencontainers.image.url https://web-check.xyz Static (Dockerfile) + auto-generated (CI)
org.opencontainers.image.source https://github.com/lissy93/web-check Static (Dockerfile) + auto-generated (CI)
org.opencontainers.image.licenses MIT Static (Dockerfile)
org.opencontainers.image.vendor Alicia Sykes Static (Dockerfile)
org.opencontainers.image.version git tag / ref Dynamic (CI via docker/metadata-action)
org.opencontainers.image.revision git SHA Dynamic (CI via docker/metadata-action)
org.opencontainers.image.created build timestamp Dynamic (CI via docker/metadata-action)

Changes

Dockerfile — static labels added to the final stage (after ENV, before CMD), covering manual docker build invocations without CI:

LABEL org.opencontainers.image.title="Web-Check" \
      org.opencontainers.image.description="All-in-one OSINT tool for analysing any website" \
      org.opencontainers.image.url="https://web-check.xyz" \
      org.opencontainers.image.source="https://github.com/lissy93/web-check" \
      org.opencontainers.image.licenses="MIT" \
      org.opencontainers.image.vendor="Alicia Sykes"

.github/workflows/docker.yml — adds docker/metadata-action@v5 to generate the dynamic labels (version, revision, created) from GitHub context, and wires them into the existing docker/build-push-action@v7 step via labels: ${{ steps.meta.outputs.labels }}. The existing tag logic is unchanged.

Verification

After merge, labels can be verified with:

docker inspect ghcr.io/lissy93/web-check:latest | jq '.[0].Config.Labels'

References

@netlify
Copy link
Copy Markdown

netlify Bot commented May 22, 2026

Deploy Preview for web-check ready!

Built without sensitive environment variables

Name Link
🔨 Latest commit 91be6c2
🔍 Latest deploy log https://app.netlify.com/projects/web-check/deploys/6a0ff1de9d94640008c64a22
😎 Deploy Preview https://deploy-preview-309--web-check.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

Signed-off-by: Erwan Hervé <erwan.herve@outlook.fr>
Signed-off-by: Erwan Hervé <erwan.herve@outlook.fr>
@Erwan-loot Erwan-loot force-pushed the chore/add-oci-labels branch from de96fa3 to 91be6c2 Compare May 22, 2026 06:04
@lissy93 lissy93 merged commit 61b6ffb into lissy93:master May 22, 2026
11 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants