Manage container metadata

gcloud

Before using any of the command data below, make the following replacements:

• ATTACHMENT: the fully qualified name of the attachment. For example, projects/my-project/locations/us-west1/repositories/my-repo/attachments/my-attachment. Alternatively, provide only the attachment ID and use the --location and --repository flags.
• TARGET: the fully qualified version name or the Artifact Registry URI of the artifact the attachment will refer to. You can use either the digest or the tag. For example, us-west1-docker.pkg.dev/my-project/my-repo/my-image:tag1.
• TYPE: the attachment's type attribute. This must comply with OCI specifications for the artifactType property.
• ATTACHMENT_NAMESPACE: a variable specific to attachments that identifies the attachment data source. For example, example.com.
• FILES: a comma-separated list of local files to include in the attachment.

Execute the following command:

Linux, macOS, or Cloud Shell

gcloud artifacts attachments create ATTACHMENT \
    --target=TARGET \
    --type=TYPE \
    --attachment-namespace=ATTACHMENT_NAMESPACE \
    --files=FILES

Windows (PowerShell)

gcloud artifacts attachments create ATTACHMENT `
    --target=TARGET `
    --type=TYPE `
    --attachment-namespace=ATTACHMENT_NAMESPACE `
    --files=FILES

Windows (cmd.exe)

gcloud artifacts attachments create ATTACHMENT ^
    --target=TARGET ^
    --type=TYPE ^
    --attachment-namespace=ATTACHMENT_NAMESPACE ^
    --files=FILES

For more information, see the gcloud artifacts attachments create command.

Oras

When creating an attachment with Oras, Artifact Registry generates a random UUID to use as the attachment name.

Before running the command, make the following replacements:

• ARTIFACT_TYPE: the artifactType of the attachment.

• IMAGE_URI: the URI for the image container the attachment refers to.

• FILE: a local file to include as metadata in the attachment.

• MEDIA_TYPE: the mediaType of the layer.

  oras attach --artifact-type ARTIFACT_TYPE IMAGE_URI FILE:MEDIA_TYPE

The following example creates an attachment consisting of a file, hello-world.txt, that refers to a container image, my-image, identified by its URI and tag:

  oras attach --artifact-type doc/example \
  us-west1-docker.pkg.dev/my-project/my-repo/my-image:tag1 \
  hello-world.txt:application/vnd.me.hi

Where:

• doc/example defines the artifactType property of the attachment.

• us-west1-docker.pkg.dev/my-project/my-repo/my-image:tag1 is the URI including the tag of the container image version the attachment will refer to.

• hello-world.txt is the local file that the attachment will hold as its data.

• application/vnd.me.hi defines the mediaType of the layer.

For a full guide and more examples, see the oras attach documentation.

Console

1. In the Google Cloud console, open the Repositories page.

   Open the Repositories page

2. Click the repository name to see images in your repository.

3. To see the versions of an image, click the image name.

4. Click the appropriate image version.

5. To see the attachments for that version, click the Attachments tab.

gcloud

Before using any of the command data below, make the following replacements:

• TARGET: the fully qualified version name or the Artifact Registry URI of the artifact you want to list attachments for. You can use either the digest or the tag. For example, us-west1-docker.pkg.dev/my-project/my-repo/my-image:tag1.

Execute the following command:

gcloud artifacts attachments list \
    --target=TARGET

gcloud artifacts attachments list `
    --target=TARGET

gcloud artifacts attachments list ^
    --target=TARGET

Oras

Before running the command, make the following replacement:

• IMAGE_URI: the URI of the target image referred to by any listed attachments.

oras discover --distribution-spec v1.1-referrers-api IMAGE_URI

The following example lists attachments for a container image, my-image, identified by its URI and tag:

oras discover --distribution-spec v1.1-referrers-api \
us-west1-docker.pkg.dev/my-project/my-repo/my-image:tag1

Where:

• v1.1-referrers-api is the Referrer API used. For more information, see the details in the distribution spec.

• us-west1-docker.pkg.dev/my-project/my-repo/my-image:tag1 is the URI including the tag of the container image version to list attachments for.

For a full guide and more examples, see the oras discover documentation.

gcloud

Before using any of the command data below, make the following replacements:

• ATTACHMENT: the fully qualified name of the attachment. For example, projects/my-project/locations/us-west1/repositories/my-repo/attachments/my-attachment. Alternatively, provide only the attachment ID here and use the --location and --repository flags.
• DESTINATION: the path in your local file system to download the attachment to.

Execute the following command:

gcloud artifacts attachments download ATTACHMENT \
    --destination=DESTINATION

gcloud artifacts attachments download ATTACHMENT `
    --destination=DESTINATION

gcloud artifacts attachments download ATTACHMENT ^
    --destination=DESTINATION

Oras

Before running the command, make the following replacements:

• DESTINATION: the destination directory for your attachment.

• ATTACHMENT_URI: the URI of the attachment to download. This is the URI for the image container the attachment refers to, followed by the attachment's unique SHA.

oras pull -o DESTINATION ATTACHMENT_URI

The following example downloads an attachment identified by its URI and digest:

oras pull -o . us-west1-docker.pkg.dev/my-project/my-repo/my-image@sha256:xxxx

Where:

• -o . names the current directory as the download destination.

• us-west1-docker.pkg.dev/my-project/my-repo/my-image@sha256:xxxx is the image URI including the digest of the attachment to download.

For a full guide and more examples, see the oras pull documentation.

Console

1. In the Google Cloud console, open the Repositories page.

   Open the Repositories page

2. Click the repository name to see images in your repository.

3. Click the image name to see versions of that image.

4. Click the version of the image you to see attachments for.

5. Click the Attachments tab to see attachments for that version.

6. Click the digest of the attachment to delete.

7. Click DELETE.

8. In the confirmation dialog, click DELETE.

gcloud

Before using any of the command data below, make the following replacements:

• ATTACHMENT: the fully qualified name of the attachment. For example, projects/my-project/locations/us-west1/repositories/my-repo/attachments/my-attachment. Alternatively, provide only the attachment ID here and use the --location and --repository flags.

Execute the following command:

gcloud artifacts attachments delete ATTACHMENT

gcloud artifacts attachments delete ATTACHMENT

gcloud artifacts attachments delete ATTACHMENT