From 932077fa71a5e2324875778328452b037673dd5e Mon Sep 17 00:00:00 2001
From: Vincent Le Goff <vincent.legoff@konghq.com>
Date: Mon, 20 Jul 2026 14:34:21 +0200
Subject: [PATCH] feat(docker): support opencontainers

---
 .github/workflows/release.yaml |  1 +
 Dockerfile                     | 10 ++++++++++
 2 files changed, 11 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 28e57964b..adb08fed8 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -108,6 +108,7 @@ jobs:
           file: Dockerfile
           platforms: linux/amd64,linux/arm64,linux/arm/v7
           tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=local,src=/tmp/.buildx-cache
           cache-to: type=local,dest=/tmp/.buildx-cache
           build-args: |
diff --git a/Dockerfile b/Dockerfile
index 9ecb6de8c..b45091637 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,6 +11,16 @@ RUN CGO_ENABLED=0 GOOS=linux go build -o deck \
       -ldflags "-s -w -X github.com/kong/deck/cmd.VERSION=$TAG -X github.com/kong/deck/cmd.COMMIT=$COMMIT"
 
 FROM alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
+ARG COMMIT
+ARG TAG
+LABEL org.opencontainers.image.title="deck" \
+      org.opencontainers.image.description="Declarative configuration for Kong" \
+      org.opencontainers.image.url="https://github.com/kong/deck" \
+      org.opencontainers.image.source="https://github.com/kong/deck" \
+      org.opencontainers.image.version="$TAG" \
+      org.opencontainers.image.revision="$COMMIT" \
+      org.opencontainers.image.licenses="Apache-2.0" \
+      org.opencontainers.image.vendor="Kong Inc."
 RUN adduser --disabled-password --gecos "" deckuser
 RUN apk --no-cache upgrade && apk --no-cache add ca-certificates jq
 USER deckuser