From 8823bd782301433453659afa16aba7ced879fd63 Mon Sep 17 00:00:00 2001
From: Oleksandr Bezdieniezhnykh <oleksandr.bezdieniezhnykh@pwc.com>
Date: Mon, 20 Apr 2026 03:58:46 +0300
Subject: [PATCH] [AZ-204] OCI revision labels + AZAION_REVISION env

Made-with: Cursor
---
 .woodpecker/build-arm.yml | 9 ++++++++-
 src/Dockerfile            | 2 ++
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/.woodpecker/build-arm.yml b/.woodpecker/build-arm.yml
index e3d1903..c905712 100644
--- a/.woodpecker/build-arm.yml
+++ b/.woodpecker/build-arm.yml
@@ -13,7 +13,14 @@ steps:
         from_secret: registry_host
     commands:
       - if [ "$CI_COMMIT_BRANCH" = "main" ]; then export TAG=arm; else export TAG=${CI_COMMIT_BRANCH}-arm; fi
-      - docker build -f src/Dockerfile -t $REGISTRY_HOST/annotations:$TAG src/
+      - export BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+      - |
+        docker build -f src/Dockerfile \
+          --build-arg CI_COMMIT_SHA=$CI_COMMIT_SHA \
+          --label org.opencontainers.image.revision=$CI_COMMIT_SHA \
+          --label org.opencontainers.image.created=$BUILD_DATE \
+          --label org.opencontainers.image.source=$CI_REPO_URL \
+          -t $REGISTRY_HOST/annotations:$TAG src/
       - docker push $REGISTRY_HOST/annotations:$TAG
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
diff --git a/src/Dockerfile b/src/Dockerfile
index efe90d1..4742dca 100644
--- a/src/Dockerfile
+++ b/src/Dockerfile
@@ -6,6 +6,8 @@ RUN arch=$([ "$TARGETARCH" = "amd64" ] && echo "x64" || echo "$TARGETARCH") && \
     dotnet publish -c Release -o /app --os linux --arch $arch
 
 FROM mcr.microsoft.com/dotnet/aspnet:10.0
+ARG CI_COMMIT_SHA=unknown
+ENV AZAION_REVISION=$CI_COMMIT_SHA
 WORKDIR /app
 COPY --from=build /app .
 EXPOSE 8080