Skip to content

exporter: revert attestation manifest push order - #7015

Merged
crazy-max merged 1 commit into
moby:masterfrom
crazy-max:revert-attestation-subject-push-order
Aug 4, 2026
Merged

crazy-max merged 1 commit into
moby:masterfrom
crazy-max:revert-attestation-subject-push-order

Conversation

@crazy-max

@crazy-max crazy-max commented Aug 3, 2026 •

Copy link
Copy Markdown
Member

Referrer manifests may be pushed before their subject, and the OCI distribution spec requires registries to initially accept a manifest whose subject does not exist yet: https://github.com/opencontainers/distribution-spec/blob/v1.1.1/spec.md#push

Keep BuildKit's default push order aligned with that behavior instead of working around registries that reject this flow.

cc @tianon

This reverts the change from moby#7012.

Referrer manifests may be pushed before their subject, and the OCI distribution spec requires registries to initially accept a manifest whose subject does not exist yet. Keep BuildKit's default push order aligned with that behavior instead of working around registries that reject this flow.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
@tianon

tianon commented Aug 3, 2026

Copy link
Copy Markdown
Member

Agreed, I think this is the right move -- if a registry is rejecting this flow, they're non-compliant to the distribution-spec, and the associated conformance tests (https://github.com/opencontainers/distribution-spec/blob/fee21197eb94360ddfa6dda0b7edabcd12456809/conformance/run.go#L382) will fail appropriately. ❤️

@thaJeztah thaJeztah left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@crazy-max
crazy-max merged commit 62f8255 into moby:master Aug 4, 2026
199 checks passed
@crazy-max
crazy-max deleted the revert-attestation-subject-push-order branch August 4, 2026 10:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

revert "exporter: fix attestation manifest push order" or make it opt-in

3 participants