Put metadata in annotations

Attestations aren't really usable

Author: dflook

.github/workflows/base-image.yaml

@@ -39,6 +39,15 @@ jobs:
             --tag danielflook/terraform-github-actions-base:latest  \
             --platform linux/amd64,linux/arm64 \
             --attest type=provenance,mode=max,builder-id=$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID \
+            --annotation "index,manifest:org.opencontainers.image.created=$(date '+%Y-%m-%dT%H:%M:%S%z')" \
+            --annotation "index,manifest:org.opencontainers.image.source=https://github.com/${{ github.repository }}" \
+            --annotation "index,manifest:org.opencontainers.image.revision=${{ github.sha }}" \
+            --annotation "index,manifest:org.opencontainers.image.title="terraform-github-actions-base" \
+            --annotation "index,manifest:org.opencontainers.image.description=Base image for terraform-github-actions" \
+            --annotation "index:org.opencontainers.image.ref.name=docker.io/danielflook/terraform-github-actions-base:$GITHUB_RUN_ID" \
+            --annotation "index,manifest:builder-id=$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID" \
+            --annotation "index,manifest:ref.tag=$GITHUB_RUN_ID" \
+            --annotation "index,manifest:org.opencontainers.image.base.name=docker.io/debian:bullseye-slim" \
             --file image/Dockerfile-base \
             --push \
             --iidfile manifest-list-digest.txt \