Store and version large files in OCI registries linked to GitHub repositories.
npx skills add https://github.com/boettiger-lab/agent-skills --skill oci-artifacts
Please help me install this Agent Skill. Skill: oci-artifacts Source: https://github.com/boettiger-lab/agent-skills/tree/main/oci-artifacts Command: npx skills add https://github.com/boettiger-lab/agent-skills --skill oci-artifacts
Storing and versioning large files like model checkpoints, datasets, and build artifacts alongside a GitHub repository using OCI registries to avoid bloating history and to keep assets in sync with code.
Push your first artifact to ghcr.io using the oras push workflow and link it to your repository.
High-intent search queries and answers about installing and using this skill.
You can store large files like model checkpoints and datasets in OCI registries to avoid bloating GitHub history. This approach keeps your assets in sync with code using content-addressing and metadata annotations for provenance.
Content-addressing with oras and ghcr.io uses sha256 digests to pin exact artifact versions, ensuring reproducible provenance and immutability. This mechanism guarantees that the pulled artifact matches the exact version linked to your source repository.
Yes, you can link artifacts pushed to an OCI registry back to your source repository using metadata-rich push workflows. This source linkage ties the artifact to the specific code state, ensuring reproducible access to datasets or compiled binaries.
The best way to secure and verify reproducible access to OCI artifacts is by combining sha256 digest pinning with optional signing and SBOMs. These metadata-rich workflows ensure that your build artifacts and test fixtures remain immutable and verifiable.
Yes, the oras push workflow supports adding SBOMs to artifact metadata. This feature allows you to attach software bills of materials alongside your model checkpoints or dataset snapshots for enhanced security and provenance tracking.
OCI registries prevent bloating repository history while keeping compiled binaries and dataset snapshots in sync with code. Unlike standard Git storage, OCI registries provide content-addressed sha256 digests, optional signing, and metadata annotations for secure, reproducible artifact management.
mitchemanCreate a private GitHub backup repository and enable auto-push on deploy.
bbsbotManage local .NET tools via a dotnet-tools.json manifest file.
jeremylongshoreScan container images and running containers for vulnerabilities using Trivy or Snyk.
partme-aiManage Alibaba Cloud OSS buckets, objects, and access control.
