bsf oci push attestations

[dr-housemd]

When a user builds an OCI image and pushes an image, we do not load/push the attestations currently(attestations.jsonl file).
We should push the attestation out via OCI referrers API, if possible as that looks like recommended way to do it from OCI community.

Once we solve for push, we can look into what changes are required to load it as well.

[hanshal101]

Would like to pick up this!!!

[FeynmanZhou]

ORAS can help you push the attestation to an OCI registry via OCI referrers API. You can try https://oras.land/docs/commands/oras_attach

[hanshal101]

ORAS can help you push the attestation to an OCI registry via OCI referrers API. You can try https://oras.land/docs/commands/oras_attach

Yup working on ORAS itself, thanks for the resource link.