Echoes from the Shell · Mar 6, 2026

Why I Built OCI Image Explorer

0Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

“Can you confirm that our production container images have valid SBOMs, signatures, and attestations?” Should have been routine. Quick check, thumbs up, move on. Instead I spent the next hour copying digests between terminal windows, mentally mapping relationships between image indexes and their referrers, and wondering why verifying a container’s supply chain felt like…

“Can you confirm that our production container images have valid SBOMs, signatures, and attestations?”

Should have been routine. Quick check, thumbs up, move on. Instead I spent the next hour copying digests between terminal windows, mentally mapping relationships between image indexes and their referrers, and wondering why verifying a container’s supply chain felt like archaeology.

So I built OCI Image Explorer – an open-source tool that shows everything attached to a container image in one view. Try it at ociexplorer.dev.

Read on /posts/why-i-built-oci-explorer/ ↗

Comments

Nothing yet. Say the first thing.