Support copy of images and associated references

[sajayantony]

The current copy implementation moves a source artifact to a target. The library needs to support moving references to support the following options

• copy all references and graph of objects
• Filter references through matching a given artifacType e.g. artifactType=sbom/example
• Support excluding references of a given artifact type
• Support filter through matching annotation
• support excluding artifacts with specified annotation
• support tag update deferment where the source artifact and references are copied by digests, then the tag is applied as the last step. This supports adding a signature to the source, and it's the only new thing that must be copied and put in sync

Examples

• Copy with specific references, included

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
    registry.acme-rockets.io/library/net-monitor:v1 \
    -r \
    -m application/vnd.cncf.notary.v2 \
    -m sbom/example

• Copy with specific references, excluded

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
    --destination registry.acme-rockets.io/library/net-monitor:v1 \
    -r \
    -x sbom/example

• Copy with specific references, included, filtered by annotation (inclusion)

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
    -r \
    -m application/vnd.cncf.notary.v2 \
    --match-annotation "org.cncf.notary.v2.signature.subject=acme-rockets.io"

• Copy with specific references, included, filtered by annotation (exclusion)

  oras cp registry.wabbit-networks.io/net-monitor:v1 \
    -r \
    -m application/vnd.cncf.notary.v2 \
    --exclude-annotation "org.cncf.notary.v2.signature.subject=wabbit-networks.io"

[juliusl]

--match-annotation does this imply pattern matching i.e. regex filter?

[sajayantony]

From a library perspective I think enabling regex/re2 support might all that is needed. CLI and other consumers can decided to expose or hide the complexity of accepting just strings or raw patterns.

[sajayantony]

CLI issue is captured here - oras-project/oras#307

[Wwwsylvia]

• Copy all references and graph of objects
  This is tracked by Extended Copy API #53 and is done.
• Filter references through matching a given artifacType e.g. artifactType=sbom/example
  This is tracked by Support filtering predecessors by artifact type on ExtendedCopy #201
• Support excluding references of a given artifact type
  This is tracked by Support filtering predecessors by artifact type on ExtendedCopy #201
• Support filter through matching annotation
  This is tracked by Support filtering predecessors by annotation on ExtendedCopy  #203
• support excluding artifacts with specified annotation
  This is tracked by Support filtering predecessors by annotation on ExtendedCopy  #203
• support tag update deferment where the source artifact and references are copied by digests, then the tag is applied as the last step. This supports adding a signature to the source, and it's the only new thing that must be copied and put in sync
  This is tracked by Copy API #52 and is done

[shizhMSFT]

Closing as tracked by #201 and #203