From d5255da0fe947fba15b2d8215715b01a40ab277c Mon Sep 17 00:00:00 2001
From: Oleksandr Bezdieniezhnykh <oleksandr.bezdieniezhnykh@pwc.com>
Date: Mon, 20 Apr 2026 03:58:46 +0300
Subject: [PATCH] [AZ-204] OCI revision labels + AZAION_REVISION env

Made-with: Cursor
---
 .woodpecker/build-arm.yml | 9 ++++++++-
 Dockerfile                | 2 ++
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/.woodpecker/build-arm.yml b/.woodpecker/build-arm.yml
index 156eab7..037ee8c 100644
--- a/.woodpecker/build-arm.yml
+++ b/.woodpecker/build-arm.yml
@@ -13,7 +13,14 @@ steps:
         from_secret: registry_host
     commands:
       - if [ "$CI_COMMIT_BRANCH" = "main" ]; then export TAG=arm; else export TAG=${CI_COMMIT_BRANCH}-arm; fi
-      - docker build -f Dockerfile -t $REGISTRY_HOST/admin:$TAG .
+      - export BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+      - |
+        docker build -f Dockerfile \
+          --build-arg CI_COMMIT_SHA=$CI_COMMIT_SHA \
+          --label org.opencontainers.image.revision=$CI_COMMIT_SHA \
+          --label org.opencontainers.image.created=$BUILD_DATE \
+          --label org.opencontainers.image.source=$CI_REPO_URL \
+          -t $REGISTRY_HOST/admin:$TAG .
       - docker push $REGISTRY_HOST/admin:$TAG
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
diff --git a/Dockerfile b/Dockerfile
index ff66332..62d8c6c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,6 +18,8 @@ RUN arch=$([ "$TARGETARCH" = "amd64" ] && echo "x64" || echo "$TARGETARCH") && \
 
 # Build runtime
 FROM base AS final
+ARG CI_COMMIT_SHA=unknown
+ENV AZAION_REVISION=$CI_COMMIT_SHA
 WORKDIR /app
 COPY --from=publish /app/publish .
 ENTRYPOINT ["dotnet", "Azaion.AdminApi.dll"]