clean up container

.github/workflows/docker.yaml

@@ -31,7 +31,10 @@ jobs:
           if [[ $VERSION =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
             TAGS="$TAGS,${DOCKER_IMAGE}:latest,ghcr.io/${DOCKER_IMAGE}:latest,quay.io/${DOCKER_IMAGE}:latest"
           fi
+          echo ::set-output name=version::${VERSION}
           echo ::set-output name=tags::${TAGS}
+          echo ::set-output name=build_date::$(date -u +'%Y-%m-%dT%H:%M:%SZ')
+          echo ::set-output name=vcs_ref::${GITHUB_SHA::8}
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v1
@@ -74,6 +77,11 @@ jobs:
             linux/arm/v7
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.prep.outputs.tags }}
+          build-args: |
+            VERSION=${{ steps.prep.outputs.version }}
+            BUILD_DATE=${{ steps.prep.outputs.build_date }}
+            VCS_REF=${{ steps.prep.outputs.vcs_ref }}
       - name: Inspect
+        if: ${{ github.event_name != 'pull_request' }}
         run: |
-          docker buildx imagetools inspect ${DOCKER_IMAGE}:${{ needs.version-check.outputs.version }}
+          docker buildx imagetools inspect ${DOCKER_IMAGE}:${{ steps.prep.outputs.version }}

Dockerfile

@@ -21,6 +21,16 @@ RUN make build
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
 FROM gcr.io/distroless/static:nonroot
 WORKDIR /
+LABEL maintainer="DirtyCajunRice,mcavoyk" \
+  org.opencontainers.image.created=$BUILD_DATE \
+  org.opencontainers.image.url="https://github.com/itscontained/secret-manager" \
+  org.opencontainers.image.source="https://github.com/itscontained/secret-manager" \
+  org.opencontainers.image.version=$VERSION \
+  org.opencontainers.image.revision=$VCS_REF \
+  org.opencontainers.image.vendor="itscontained" \
+  org.opencontainers.image.title="secret-manager" \
+  org.opencontainers.image.description="Secret Manager is a set of Kubernetes CRDs and controllers which define a common method of interacting with External SecretStores." \
+  org.opencontainers.image.licenses="APACHE"
 COPY --from=builder /workspace/bin/manager .
 USER nonroot:nonroot