Container image metadata

Identify the metadata consumer and storage location before changing keys. Prefer OCI conventions for new images.

Choose the location

• Inspect the Dockerfile, build configuration, published image, and downstream consumers.
• Separate image configuration labels from annotations on OCI manifests, indexes, and descriptors.
• Use Dockerfile LABEL for image configuration metadata. Configure manifest or index annotations through the existing builder.
• Select the level the consumer reads. Matching key names do not synchronize values across locations.
• For multi-platform images, inspect the index and each relevant platform manifest and configuration.
• Verify the builder, exporter, and registry preserve the selected annotations. A local image load may not preserve them.

Choose truthful values

Use string keys and values. Populate only fields supported by build or repository evidence.