Merge pull request moby#5197 from candrews/frontend-oci-annotations

ci: add OCI image annotations to Dockerfile frontend images

Author: crazy-max

frontend/dockerfile/cmd/dockerfile-frontend/hack/release

@@ -75,6 +75,18 @@ if [[ "$RELEASE" = "true" ]] && [[ "$GITHUB_ACTIONS" = "true" ]]; then
   nocacheFilterFlag="--no-cache-filter=base"
 fi
 
+outputFlag="type=image,$pushFlag"
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  outputFlag="${outputFlag},\"annotation.org.opencontainers.image.title=Dockerfile Frontend\""
+  if [ -n "$GITHUB_SHA" ]; then
+    outputFlag="${outputFlag},annotation.org.opencontainers.image.revision=$GITHUB_SHA"
+  fi
+  if [ -n "$GITHUB_REPOSITORY" ] && [ -n "$GITHUB_SERVER_URL" ]; then
+    outputFlag="${outputFlag},annotation.org.opencontainers.image.source=$GITHUB_SERVER_URL/$GITHUB_REPOSITORY"
+    outputFlag="${outputFlag},annotation.org.opencontainers.image.url=$GITHUB_SERVER_URL/$GITHUB_REPOSITORY"
+  fi
+fi
+
 case $TYP in
 "master")
   tagf=./frontend/dockerfile/release/$TAG/tags
@@ -92,7 +104,7 @@ case $TYP in
   buildxCmd build $platformFlag $cacheFromFlags $cacheToFlags $nocacheFilterFlag $(buildAttestFlags) \
     --build-arg "CHANNEL=$TAG" \
     --build-arg "BUILDTAGS=$buildTags" \
-    --output "type=image,name=$REPO:$pushTag,$pushFlag" \
+    --output "${outputFlag},name=$REPO:$pushTag" \
     --file "./frontend/dockerfile/cmd/dockerfile-frontend/Dockerfile" \
     $currentcontext
   ;;
@@ -105,11 +117,15 @@ case $TYP in
     exit 1
   fi
   buildTags=$(cat $tagf)
+  outputFlag="${outputFlag},\"name=$publishedNames\""
+  if [ "$GITHUB_ACTIONS" = "true" ]; then
+    outputFlag="${outputFlag},annotation.org.opencontainers.image.version=$TAG"
+  fi
 
   buildxCmd build $platformFlag $cacheFromFlags $cacheToFlags $nocacheFilterFlag $(buildAttestFlags) \
     --build-arg "CHANNEL=$TAG" \
     --build-arg "BUILDTAGS=$buildTags" \
-    --output "type=image,\"name=$publishedNames\",$pushFlag" \
+    --output "$outputFlag" \
     --file "./frontend/dockerfile/cmd/dockerfile-frontend/Dockerfile" \
     $currentcontext
   ;;