From 0108be9e9fb5ec28f13163199188f4b779ccd184 Mon Sep 17 00:00:00 2001
From: Maksim Nabokikh <maksim.nabokikh@flant.com>
Date: Fri, 20 Feb 2026 10:59:33 +0100
Subject: [PATCH] feat: add skopeo copy command to transfer image from OCI
 layout (#4564)

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
---
 .github/workflows/artifacts.yaml | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml
index 27505f32..ba949930 100644
--- a/.github/workflows/artifacts.yaml
+++ b/.github/workflows/artifacts.yaml
@@ -163,10 +163,19 @@ jobs:
       #     path: image.tar
 
       - name: Extract OCI tarball
+        id: extract-oci
         run: |
           mkdir -p image
           tar -xf image.tar -C image
 
+          image_name=$(jq -r '.manifests[0].annotations["io.containerd.image.name"]' image/index.json)
+          image_tag=$(jq -r '.manifests[0].annotations["org.opencontainers.image.ref.name"]' image/index.json)
+
+          echo "Copying $image_tag -> $image_name"
+          skopeo copy "oci:image:$image_tag" "docker-daemon:$image_name"
+
+          echo "value=$image_name" >> "$GITHUB_OUTPUT"
+
       # - name: List tags
       #   run: skopeo --insecure-policy list-tags oci:image
       #
@@ -202,8 +211,7 @@ jobs:
 
       - name: Prepare image fs for scanning
         run: |
-          docker load --input image.tar
-          docker export $(docker create --rm ${{ steps.image-name.outputs.value }}@${{ steps.build.outputs.digest }}) -o docker-image.tar
+          docker export $(docker create --rm ${{ steps.extract-oci.outputs.value }}) -o docker-image.tar
 
           mkdir -p docker-image
           tar -xf docker-image.tar -C docker-image