[bitnami/containers] Add publish osspi feature (#21804)

[bitnami/containers] Add publish osspi feature #21804

Signed-off-by: Fran Mulero <fmulero@vmware.com>

.github/workflows/cd-pipeline.yml

@@ -1,205 +1,87 @@
-name: '[CI/CD] CD Pipeline'
-run-name: " ${{ github.event_name == 'workflow_dispatch' && format('[CD] Retrying SHA: {0}', inputs.sha) || '' }}"
+name: '[CI/CD] CD Pipeline Run'
+run-name: "${{ format('[CI/CD] CD Publish {0}',github.event.workflow_run.display_title) }}"
 on: # rebuild any PRs and main branch changes
-  workflow_dispatch:
-    inputs:
-      sha:
-        description: 'Commit to retry'
-        required: true
-        default: 'HEAD'
-  push:
-    branches:
-      - main
-    paths:
-      - 'bitnami/**'
+  workflow_run:
+    workflows:
+      - '\[CI/CD\] CD Prepare'
+    types:
+      - 'completed'
+permissions:
+  actions: read
 env:
   CSP_API_URL: https://console.cloud.vmware.com
   CSP_API_TOKEN: ${{ secrets.CSP_API_TOKEN }}
   VIB_PUBLIC_URL: https://cp.bromelia.vmware.com
 jobs:
-  get-containers:
+  get-metadata:
     runs-on: ubuntu-latest
     name: Get modified containers path
-    if: |
-      github.event_name == 'workflow_dispatch' ||
-      (github.event.head_commit.author.username == 'bitnami-bot' && github.event.forced == false)
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
     outputs:
-      result: ${{ steps.get-containers.outputs.result }}
-      containers: ${{ steps.get-containers.outputs.containers }}
+      packages_json_url: ${{ steps.get-artifacts.outputs.packages_json_url }}
+      containers: ${{ steps.get-artifacts.outputs.containers }}
+      marketplace_user: ${{ steps.get-registry-credentials.outputs.marketplace_user }}
+      marketplace_passwd: ${{ steps.get-registry-credentials.outputs.marketplace_passwd }}
     steps:
-      - id: get-containers
+      - id: get-artifacts
         name: Get modified containers path
         env:
-          GITHUB_COMMITS: ${{ github.event_name == 'workflow_dispatch' && format('[{{"id":"{0}"}}]', inputs.sha) || toJson(github.event.commits) }}
+          PREPARE_WORKFLOW_ARTIFACTS_URL: ${{ github.event.workflow_run.artifacts_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # Get all commits associated to the push
-          commits=($(echo "${GITHUB_COMMITS}" | jq -r '.[] | .id'))
-          containers=()
-          for commit in "${commits[@]}"; do
-            containers_in_commit=()
-            # Using the Github API to detect the files changed as git merge-base stops working when the branch is behind
-            URL="https://api.github.com/repos/${{ github.repository }}/commits/${commit}"
-            files_changed_data=$(curl -s --header 'authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' -X GET -G "$URL")
-            files_changed="$(echo $files_changed_data | jq -r '.files[] | .filename')"
-            # Adding || true to avoid "Process exited with code 1" errors
-            containers_in_commit+=($(echo "$files_changed" | xargs dirname | grep -o "^bitnami/[^/]*/[^/]*/[^/]*" | sort | uniq || true))
-            for container in "${containers_in_commit[@]}"; do
-              if [[ ! $containers =~ (^|[[:space:]])$container($|[[:space:]]) ]]; then
-                # Avoid duplicates
-                containers+=("${container}")
-              fi
-            done
-          done
-
-          if [[ "${#containers[@]}" -le "0" ]]; then
-            echo "No changes detected in containers. The rest of the steps will be skipped."
-            echo "result=skip" >> $GITHUB_OUTPUT
-          else
-            containers_json=$(printf "%s\n" "${containers[@]}" | jq -R . | jq -cs .)
-            echo "result=ok" >> $GITHUB_OUTPUT
-            echo "containers=${containers_json}" >> $GITHUB_OUTPUT
-          fi
-  vib-publish:
-    runs-on: ubuntu-latest
-    needs: get-containers
-    if: ${{ needs.get-containers.outputs.result == 'ok' }}
-    name: Publish
-    strategy:
-      fail-fast: false
-      max-parallel: 2
-      matrix:
-        container: ${{ fromJSON(needs.get-containers.outputs.containers) }}
-    steps:
-      - uses: actions/checkout@v3
-        name: Checkout Repository
-        # Full history is not required anymore
-        with:
-          fetch-depth: 1
-      - id: get-container-metadata
-        name: Get image tag and container name
-        run: |
-          if [[ -d "${{ matrix.container }}" ]]; then
-            tag="$(grep -oE "org.opencontainers.image.ref.name=\".+\"" ${{ matrix.container }}/Dockerfile | sed -nr "s|org.opencontainers.image.ref.name=\"(.+)\"|\1|p")"
-            if [[ -z "${tag}" ]]; then
-              echo "No tag found for: ${{ matrix.container }}"
-              exit 1
-            else
-              rolling_tags="$(yq '.rolling-tags' ${{ matrix.container }}/tags-info.yaml -o json | jq -c)"
-              name="$(echo "${{ matrix.container }}" | awk -F '/' '{print $2}')"
-              branch="$(echo "${{ matrix.container }}" | awk -F '/' '{print $3}')"
-              echo "rolling_tags=${rolling_tags}" >> $GITHUB_OUTPUT
-              echo "tag=${tag}" >> $GITHUB_OUTPUT
-              echo "name=${name}" >> $GITHUB_OUTPUT
-              echo "branch=${branch}" >> $GITHUB_OUTPUT
-              echo "result=ok" >> $GITHUB_OUTPUT
-            fi
-          else
-            # Container folder doesn't exists we are assuming a deprecation
-            echo "result=skip" >> $GITHUB_OUTPUT
-          fi
+          curl -sSL -o artifacts.json -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" -H "Authorization: Bearer $GITHUB_TOKEN" $PREPARE_WORKFLOW_ARTIFACTS_URL
+          publish_metadata_url="$(jq -r '.artifacts[] | select(.name == "publish-metadata.json") | .archive_download_url' artifacts.json)"
+          curl -sSL -o publish-metadata.json.zip -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" -H "Authorization: Bearer $GITHUB_TOKEN" $publish_metadata_url
+          unzip publish-metadata.json.zip
+          containers=$(cat publish-metadata.json | jq -c)
+          packages_json_url="$(jq -r '.artifacts[] | select(.name == "packages.json") | .archive_download_url' artifacts.json)"
+          echo "packages_json_url=${packages_json_url}" >> $GITHUB_OUTPUT
+          echo "containers=${containers}" >> $GITHUB_OUTPUT
       - id: get-registry-credentials
         name: Get marketplace's registry credentials
+        if: ${{ steps.get-artifacts.output.packages_json_url != '' }}
         run: |
-          csp_auth_token=$(curl -s -H 'Content-Type: application/x-www-form-urlencoded' -X POST -d "grant_type=refresh_token&api_token=${{ secrets.PROD_MARKETPLACE_API_TOKEN }}" https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize | jq -re .access_token)
-          repo_info=$(curl -s -X POST -H "Content-Type: application/json" -H "csp-auth-token:$csp_auth_token" -d '{"withCredentials":true, "storageType":"OCI"}' https://gtw.marketplace.cloud.vmware.com/api/v1/repositories/transient)
+          # csp_auth_token=$(curl -s -H 'Content-Type: application/x-www-form-urlencoded' -X POST -d "grant_type=refresh_token&api_token=${{ secrets.PROD_MARKETPLACE_API_TOKEN }}" https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize | jq -re .access_token)
+          # repo_info=$(curl -s -X POST -H "Content-Type: application/json" -H "csp-auth-token:$csp_auth_token" -d '{"withCredentials":true, "storageType":"OCI"}' https://gtw.marketplace.cloud.vmware.com/api/v1/repositories/transient)
           marketplace_user=$(echo "$repo_info" | jq -re .response.repodetails.username)
           marketplace_passwd=$(echo "$repo_info" | jq -re .response.repodetails.token)
           echo "::add-mask::${marketplace_user}"
           echo "::add-mask::${marketplace_passwd}"
           echo "marketplace_user=${marketplace_user}" >> $GITHUB_OUTPUT
           echo "marketplace_passwd=${marketplace_passwd}" >> $GITHUB_OUTPUT
-      - id: get-dsl-filepath
-        name: Get pipeline DSL filepath
-        run: |
-          dsl_path="${{ steps.get-container-metadata.outputs.name }}"
-          if [[ -d ".vib/${dsl_path}/${{ steps.get-container-metadata.outputs.branch }}" ]]; then
-            dsl_path="${dsl_path}/${{ steps.get-container-metadata.outputs.branch }}"
-          fi
-          echo "dsl_path=${dsl_path}" >> $GITHUB_OUTPUT
-      - uses: vmware-labs/vmware-image-builder-action@main
-        name: 'Publish ${{ steps.get-container-metadata.outputs.name }}: ${{ steps.get-container-metadata.outputs.tag }}'
-        if: ${{ steps.get-container-metadata.outputs.result == 'ok' }}
+
+  vib-publish:
+    runs-on: ubuntu-latest
+    needs: get-metadata
+    name: Publish
+    strategy:
+      fail-fast: false
+      max-parallel: 2
+      matrix:
+        container: ${{ fromJSON(needs.get-metadata.outputs.containers) }}
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+        # Full history is not required anymore
         with:
-          pipeline: ${{ steps.get-dsl-filepath.outputs.dsl_path }}/vib-publish.json
+          ref: ${{ matrix.container.sha }}
+          fetch-depth: 1
+      - uses: vmware-labs/vmware-image-builder-action@main
+        name: 'Publish ${{ matrix.container.name }}: ${{ matrix.container.tag }}'
+        with:
+          pipeline: ${{ matrix.container.dsl_path }}/vib-publish.json
         env:
           # Path with docker resources
-          VIB_ENV_PATH:  ${{ matrix.container }}
+          VIB_ENV_PATH:  "${{ matrix.container.path }}"
           # Container name
-          VIB_ENV_CONTAINER: ${{ steps.get-container-metadata.outputs.name }}
-          VIB_ENV_TAG: ${{ steps.get-container-metadata.outputs.tag }}
-          VIB_ENV_ROLLING_TAGS: ${{ steps.get-container-metadata.outputs.rolling_tags }}
-          VIB_ENV_REGISTRY_URL: ${{ secrets.PROD_MARKETPLACE_REGISTRY_URL }}
-          VIB_ENV_REGISTRY_USERNAME: ${{ steps.get-registry-credentials.outputs.marketplace_user }}
-          VIB_ENV_REGISTRY_PASSWORD: ${{ steps.get-registry-credentials.outputs.marketplace_passwd }}
-      - name: Install s3cmd
-        run: sudo apt-get install -y s3cmd
-      - name: 'Getting 3rd party packages for OSSPI for ${{ steps.get-container-metadata.outputs.name }}: ${{ steps.get-container-metadata.outputs.tag }}'
-        if: ${{ steps.get-container-metadata.outputs.result == 'ok' }}
-        env:
-          # Path with docker resources
-          VIB_ENV_PATH: ${{ matrix.container }}
-        run: |
-          # If it's set from outside, can be changed
-          ARCH="${ARCH:-amd64}"
-          IMAGE_NAME=$(grep -oE "org.opencontainers.image.ref.name=\".+\"" ${{ matrix.container }}/Dockerfile | sed -nr "s|org.opencontainers.image.ref.name=\"(.+)\"|\1|p")
-          VERSION=$(grep -oE "org.opencontainers.image.version=\".+\"" ${{ matrix.container }}/Dockerfile | sed -nr "s|org.opencontainers.image.version=\"(.+)\"|\1|p")
-          ASSET=$(grep -oE "org.opencontainers.image.title=\".+\"" ${{ matrix.container }}/Dockerfile | sed -nr "s|org.opencontainers.image.title=\"(.+)\"|\1|p")
-          CLEANED_IMAGE_NAME=${IMAGE_NAME#"$VERSION-"}
-          # split by -
-          ASSET_DATA=(${CLEANED_IMAGE_NAME//-/ })
-          OS=${ASSET_DATA[0]}-${ASSET_DATA[1]}
-          REVISION=(${ASSET_DATA[2]/r/})
-
-          COMPONENTS_FILES=$(s3cmd ls -l --access_key=${{ secrets.AWS_ACCESS_KEY_ID }} --secret_key=${{ secrets.AWS_SECRET_ACCESS_KEY }} s3://${{ secrets.AWS_S3_BUCKET }}/$ASSET/$VERSION/$OS/$ARCH/$REVISION/ | grep "components.json" | wc -l)
-          # If the components.json file, so it seems has external packages
-          if [[ $COMPONENTS_FILES -gt 0 ]]; then
-            s3cmd get --access_key=${{ secrets.AWS_ACCESS_KEY_ID }} --secret_key=${{ secrets.AWS_SECRET_ACCESS_KEY }} s3://${{ secrets.AWS_S3_BUCKET }}/$ASSET/$VERSION/$OS/$ARCH/$REVISION/components.json components.json
-
-            declare -A PACKAGES
-            # Iterating over the external components to get the involved elements
-            while read -r COMPONENT_ID; do
-              COMPONENT_VERSION_FULL=$(jq -c ".$COMPONENT_ID.version" components.json)
-              COMPONENT_VERSION_FULL=(${COMPONENT_VERSION_FULL//"\""/})
-
-              # Sanityzing strings
-              COMPONENT_ID=(${COMPONENT_ID//"\""/})
-              #split by "-"
-              COMPONENT_PARTS=(${COMPONENT_VERSION_FULL//-/ })
-              COMPONENT_VERSION=${COMPONENT_PARTS[0]}
-
-              COMPILATION_RECIPE=$(s3cmd ls -l --access_key=${{ secrets.AWS_ACCESS_KEY_ID }} --secret_key=${{ secrets.AWS_SECRET_ACCESS_KEY }} s3://${{ secrets.AWS_S3_BUCKET }}/$COMPONENT_ID/$COMPONENT_VERSION/$OS/$ARCH/ | grep "compilation-recipe.json" | wc -l)
-              # If the components.json file, so it seems has external packages
-              if [[ $COMPILATION_RECIPE -gt 0 ]]; then
-                s3cmd get --access_key=${{ secrets.AWS_ACCESS_KEY_ID }} --secret_key=${{ secrets.AWS_SECRET_ACCESS_KEY }} s3://${{ secrets.AWS_S3_BUCKET }}/$COMPONENT_ID/$COMPONENT_VERSION/$OS/$ARCH/compilation-recipe.json compilation-recipe.json
-              else
-                s3cmd get --access_key=${{ secrets.AWS_ACCESS_KEY_ID }} --secret_key=${{ secrets.AWS_SECRET_ACCESS_KEY }} s3://${{ secrets.AWS_S3_BUCKET }}/$COMPONENT_ID/$COMPONENT_VERSION-${COMPONENT_PARTS[1]}/$OS/$ARCH/compilation-recipe.json compilation-recipe.json
-              fi
-              # now getting each component to be reported
-              while read -r JSON_PACKAGE; do
-                PACKAGE_ID=$(echo "$JSON_PACKAGE" | jq -r '.id' )
-                PACKAGE_VERSION=$(echo "$JSON_PACKAGE" | jq -r '.version' )
-                PACKAGE_URL=$(echo "$JSON_PACKAGE" | jq -r '.source.upstreamSourceUrl')
-                PACKAGES[$PACKAGE_ID]="$PACKAGE_VERSION $PACKAGE_URL"
-              done <<<"$(jq -c '.components[]' compilation-recipe.json)"
-              rm compilation-recipe.json
-            done <<<"$(jq -c 'keys[]' components.json)"
-
-            # Now creating the JSON file with the needed transformations
-            JSON_PACKAGES=()
-            for PACKAGE_ID in "${!PACKAGES[@]}"
-            do
-              VALUES=(${PACKAGES[$PACKAGE_ID]// / })
-              CLEANED_URL=(${VALUES[1]/git+/})
-              if [ -z "$CLEANED_URL" ]
-              then
-                echo "[WARNING] The URL for $PACKAGE_ID:${VALUES[0]} is missing in the recipe"
-              else
-                JSON_PACKAGES+=($(jq -n '{"_unique_id": $uniqueID, "name": $name, "version": $version, "url": $url, "repository": "other"}' --arg uniqueID "other:$PACKAGE_ID:${VALUES[0]}" --arg name $PACKAGE_ID --arg version ${VALUES[0]} --arg url $CLEANED_URL))
-              fi
-            done
-            JSON_ARRAY=$(printf "%s" "${JSON_PACKAGES[@]}" | jq -s)
-            echo "$JSON_ARRAY" > packages.json
-            s3cmd put --access_key=${{ secrets.AWS_ACCESS_KEY_ID }} --secret_key=${{ secrets.AWS_SECRET_ACCESS_KEY }} packages.json s3://${{ secrets.AWS_S3_BUCKET }}/$ASSET/$VERSION/$OS/$ARCH/$REVISION/packages.json
-          else
-            echo "$IMAGE_NAME:$VERSION doesn't have external components.json"
-          fi
+          VIB_ENV_CONTAINER: "${{ matrix.container.name }}"
+          VIB_ENV_CONTAINER_URL: "${{ matrix.container.sha_url }}"
+          VIB_ENV_PACKAGES_JSON_URL: "${{ needs.get-metadata.outputs.packages_json_url }}"
+          VIB_ENV_APP_VERSION: "${{ matrix.container.app_version }}"
+          VIB_ENV_OS_FLAVOUR: "${{ matrix.container.os_flavour }}"
+          VIB_ENV_GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+          VIB_ENV_TAG: "${{ matrix.container.tag }}"
+          VIB_ENV_ROLLING_TAGS: "${{ toJSON(matrix.container.rolling_tags) }}"
+          VIB_ENV_REGISTRY_URL: "${{ secrets.PROD_MARKETPLACE_REGISTRY_URL }}"
+          VIB_ENV_REGISTRY_USERNAME: "${{ needs.get-metadata.outputs.marketplace_user }}"
+          VIB_ENV_REGISTRY_PASSWORD: "${{ needs.get-metadata.outputs.marketplace_passwd }}"

.github/workflows/cd-prepare.yml

@@ -0,0 +1,170 @@
+name: '[CI/CD] CD Prepare'
+run-name: "${{ github.event_name == 'workflow_dispatch' && format('Retrying SHA: {0}', inputs.sha) || '' }}"
+on: # rebuild any PRs and main branch changes
+  workflow_dispatch:
+    inputs:
+      sha:
+        description: 'Commit to retry'
+        required: true
+        default: 'HEAD'
+  push:
+    branches:
+      - main
+    paths:
+      - 'bitnami/**'
+env:
+  CSP_API_URL: https://console.cloud.vmware.com
+  CSP_API_TOKEN: ${{ secrets.CSP_API_TOKEN }}
+  VIB_PUBLIC_URL: https://cp.bromelia.vmware.com
+jobs:
+  prepare:
+    runs-on: ubuntu-latest
+    name: Retrieve metadata and auxiliary files
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.head_commit.author.username == 'bitnami-bot' && github.event.forced == false)
+    outputs:
+      result: ${{ steps.get-publish-metadata.outputs.result }}
+      containers: ${{ steps.get-publish-metadata.outputs.containers }}
+    steps:
+      - name: Install s3cmd
+        run: sudo apt-get install -y s3cmd
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+        # Full history is not required anymore
+        with:
+          ref: ${{github.event_name == 'workflow_dispatch' && inputs.sha || '' }}
+          fetch-depth: 1
+      - id: get-publish-metadata
+        name: Get information about containers to publish
+        env:
+          GITHUB_REPO: ${{ github.repository }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_COMMITS: ${{ github.event_name == 'workflow_dispatch' && format('[{{"id":"{0}"}}]', inputs.sha) || toJson(github.event.commits) }}
+          SHA_URL: ${{ format('{0}/tarball/{1}', github.event.repository.url, (github.event_name == 'workflow_dispatch' && inputs.sha || github.sha)) }}
+          SHA: ${{github.event_name == 'workflow_dispatch' && inputs.sha || '' }}
+        run: |
+          # Get all commits associated to the push
+          containers=()
+          while read -r commit; do
+            # Using the Github API to detect the files changed as git merge-base stops working when the branch is behind
+            url="https://api.github.com/repos/${GITHUB_REPO}/commits/${commit}"
+            files_changed_data=$(curl -s --header "authorization: Bearer ${GITHUB_TOKEN}" -X GET -G "$url")
+            files_changed="$(echo "$files_changed_data" | jq -r '.files[] | .filename')"
+            while read -r container; do
+              if [[ ! "${containers[*]}" =~ (^|[[:space:]])$container($|[[:space:]]) ]]; then
+                # Avoid duplicates
+                containers+=("${container}")
+                if [[ -d "${container}" ]]; then
+                  tag="$(grep -oE "org.opencontainers.image.ref.name=\".+\"" "${container}/Dockerfile" | sed -nr "s|org.opencontainers.image.ref.name=\"(.+)\"|\1|p")"
+                  if [[ -z "${tag}" ]]; then
+                    echo "No tag found for: ${container}"
+                  else
+                    name="$(grep -oE "org.opencontainers.image.title=\".+\"" "${container}/Dockerfile" | sed -nr "s|org.opencontainers.image.title=\"(.+)\"|\1|p")"
+                    app_version="$(grep -oE "org.opencontainers.image.version=\".+\"" "${container}/Dockerfile" | sed -nr "s|org.opencontainers.image.version=\"(.+)\"|\1|p")"
+                    os_flavour="$(grep -oP "OS_FLAVOUR=\"\K[^\"]+" "${container}/Dockerfile")"
+                    revision="${tag#"${app_version}-${os_flavour}-r"}"
+                    rolling_tags="$(yq '.rolling-tags' "${container}/tags-info.yaml" -o json | jq -c)"
+                    branch="$(echo "${container}" | awk -F '/' '{print $3}')"
+                    dsl_path="${name}"
+                    if [[ -d ".vib/${dsl_path}/${branch}" ]]; then
+                      dsl_path="${dsl_path}/${branch}"
+                    fi
+                    container_json=$(jq -n '{"name": $name, "path": $path, "os_flavour": $os_flavour, "branch": $branch, "app_version": $app_version, "revision": $revision, "sha": $sha, "sha_url": $sha_url, "dsl_path": $dsl_path, "tag": $tag, "rolling_tags": $rolling_tags}' \
+                                    --arg name "$name" --arg path "$container" --arg os_flavour "$os_flavour" --arg branch "$branch" --arg app_version "$app_version" --arg revision "$revision" --arg sha "$SHA" --arg sha_url "$SHA_URL" --arg dsl_path "$dsl_path" --arg tag "$tag" --argjson rolling_tags "$rolling_tags")
+                    containers_json+=("${container_json}")
+                  fi
+                fi
+              fi
+            done <<< "$(echo "$files_changed" | xargs dirname | grep -o "^bitnami/[^/]*/[^/]*/[^/]*" | sort | uniq || true)"
+          done <<< "$(echo "${GITHUB_COMMITS}" | jq -r '.[] | .id')"
+
+          if [[ "${#containers[@]}" -le "0" ]]; then
+            echo "No changes detected in containers. The rest of the steps will be skipped."
+            echo "result=skip" >> $GITHUB_OUTPUT
+          else
+            publish_metadata=$(printf "%s\n" "${containers_json[@]}" | jq -s .)
+            echo "result=ok" >> $GITHUB_OUTPUT
+            echo "${publish_metadata}" > publish-metadata.json
+          fi
+      - name: Getting 3rd party packages for OSSPI
+        if: ${{ steps.get-publish-metadata.outputs.result == 'ok' }}
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
+          AWS_DEFAULT_REGION: us-east-1
+        run: |
+          while read -r container; do
+            # If it's set from outside, can be changed
+            arch="${arch:-amd64}"
+            image_name=$(echo "$container" | jq -cr '.tag')
+            image_path=$(echo "$container" | jq -cr '.path')
+            version=$(echo "$container" | jq -cr '.app_version')
+            asset=$(echo "$container" | jq -cr '.name')
+            os_flavour=$(echo "$container" | jq -cr '.os_flavour')
+            revision=$(echo "$container" | jq -cr '.revision')
+
+            components_files=$(s3cmd ls -l "s3://$AWS_S3_BUCKET/$asset/$version/$os_flavour/$arch/$revision/" | grep -c "components.json")
+            # If the components.json file, so it seems has external packages
+            if [[ $components_files -gt 0 ]]; then
+              s3cmd get -q "s3://${AWS_S3_BUCKET}/$asset/$version/$os_flavour/$arch/$revision/components.json" components.json
+
+              declare -A packages=()
+              # Iterating over the external components to get the involved elements
+              while read -r component_id; do
+                component_version_full=$(jq -cr '."'${component_id}'".version' components.json)
+
+                #split by "-"
+                component_parts=(${component_version_full//-/ })
+                component_version=${component_parts[0]}
+                compilation_recipe=$(s3cmd ls -l "s3://${AWS_S3_BUCKET}/$component_id/$component_version/$os_flavour/$arch/" | grep -c "compilation-recipe.json")
+                # If the components.json file, so it seems has external packages
+                if [[ $compilation_recipe -gt 0 ]]; then
+                  s3cmd get -q  "s3://${AWS_S3_BUCKET}/$component_id/$component_version/$os_flavour/$arch/compilation-recipe.json" compilation-recipe.json
+                else
+                  s3cmd get -q "s3://${AWS_S3_BUCKET}/$component_id/$component_version-${component_parts[1]}/$os_flavour/$arch/compilation-recipe.json" compilation-recipe.json
+                fi
+                # now getting each component to be reported
+                while read -r json_package; do
+                  package_id=$(echo "$json_package" | jq -r '.id' )
+                  echo "${asset}: ${package_id}"
+                  package_version=$(echo "$json_package" | jq -r '.version' )
+                  package_url=$(echo "$json_package" | jq -r '.source.upstreamSourceUrl')
+                  packages[$package_id]="$package_version $package_url"
+                done <<<"$(jq -cr '.components[]' compilation-recipe.json)"
+                rm compilation-recipe.json
+              done <<<"$(jq -cr 'keys[]' components.json)"
+
+              # Now creating the JSON file with the needed transformations
+              declare -a json_packages=()
+              for package_id in "${!packages[@]}"
+              do
+                values=(${packages[$package_id]// / })
+                cleaned_url="${values[1]#git+}"
+                if [ -z "$cleaned_url" ]
+                then
+                  echo "[WARNING] The URL for ${package_id}:${values[0]} is missing in the recipe"
+                else
+                  json_packages+=($(jq -n '{"_unique_id": $uniqueID, "name": $name, "version": $version, "url": $url, "repository": "other"}' --arg uniqueID "other:$package_id:${values[0]}" --arg name "$package_id" --arg version "${values[0]}" --arg url "$cleaned_url"))
+                fi
+              done
+              JSON_ARRAY=$(printf "%s" "${json_packages[@]}" | jq -s)
+              echo "${JSON_ARRAY}" > "${image_path}/packages.json"
+              jq -n '{"packages": $packages, "server": { "scanner": "custom", "type": "Hub"}}' --argjson packages "$(cat ${image_path}/packages.json)" > "$image_path/osspi-packages.json"
+              s3cmd put "${image_path}/packages.json" "s3://${AWS_S3_BUCKET}/${asset}/${version}/${os_flavour}/${arch}/${revision}/packages.json"
+              rm components.json
+            else
+              echo "$image_name:$version doesn't have external components.json"
+            fi
+          done <<<"$(jq -c '.[]' publish-metadata.json)"
+      - uses: actions/upload-artifact@v3
+        if: ${{ steps.get-publish-metadata.outputs.result == 'ok' }}
+        with:
+          name: publish-metadata.json
+          path: ./publish-metadata.json
+      - uses: actions/upload-artifact@v3
+        if: ${{ steps.get-publish-metadata.outputs.result == 'ok' }}
+        with:
+          name: packages.json
+          path: ~/work/containers/**/osspi-packages.json

.vib/acmesolver/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/airflow-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/airflow-scheduler/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/airflow-worker/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/airflow/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/alertmanager/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/apache-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/apache/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/appsmith/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/argo-cd/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/argo-workflow-cli/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/argo-workflow-controller/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/argo-workflow-exec/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/aspnet-core/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/aws-cli/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/azure-cli/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/bitnami-shell/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/blackbox-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/cainjector/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/cassandra-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/cassandra/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/cert-manager-webhook/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/cert-manager/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/chartmuseum/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/clickhouse/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/cluster-autoscaler/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/codeigniter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/concourse/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/configmap-reload/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/configurable-http-proxy/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/consul-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/consul/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/contour-operator/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/contour/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/cosign/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/couchdb/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/dex/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/discourse/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/dokuwiki/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/dotnet-sdk/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/dotnet/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/drupal-nginx/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/drupal/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/ejbca/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/elasticsearch-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/elasticsearch/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/envoy/1.20/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/envoy/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/etcd/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/express/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/external-dns/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/fluent-bit/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/fluentd/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/geode/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/ghost/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/git/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/gitea/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/gitlab-runner-helper/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/gitlab-runner/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/golang/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/google-cloud-sdk/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/gotrue/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/gradle/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana-image-renderer/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana-loki/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana-mimir/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana-operator/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana-tempo-query/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana-tempo-vulture/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana-tempo/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/grafana/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/haproxy/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-adapter-trivy/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-core/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-jobservice/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-notary-server/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-notary-signer/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-portal/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-registry/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/harbor-registryctl/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/influxdb/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jaeger/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jasperreports/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/java/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jenkins/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jmx-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/joomla/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jruby/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jsonnet/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jupyter-base-notebook/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/jupyterhub/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/kafka-exporter/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/kafka/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/kapacitor/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -49,6 +49,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/keycloak-config-cli/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/keycloak/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },

.vib/kiam/vib-publish.json

@@ -1,7 +1,7 @@
 {
   "context": {
     "resources": {
-      "url": "{SHA_ARCHIVE}",
+      "url": "{VIB_ENV_CONTAINER_URL}",
       "path": "{VIB_ENV_PATH}"
     }
   },
@@ -50,6 +50,25 @@
               "OS"
             ]
           }
+        },
+        {
+          "action_id": "osspi-application",
+          "params": {
+            "additional_packages_file": "{VIB_ENV_PATH}/osspi-packages.json",
+            "scan_type": "BASE_OS",
+            "osm": {
+              "product_name": "main-catalog-{VIB_ENV_CONTAINER}",
+              "product_version": "{VIB_ENV_APP_VERSION}-{VIB_ENV_OS_FLAVOUR}-container"
+            },
+            "resources": {
+              "url": "{VIB_ENV_PACKAGES_JSON_URL}",
+              "path": "/",
+              "authn": {
+                  "header": "Authorization",
+                  "token": "Bearer {VIB_ENV_GITHUB_TOKEN}"
+                }
+            }
+          }
         }
       ]
     },