Hi

I am under the impression that labels could be really useful for managing some aspects of docker container image vulnerabilities. Yet they seem not to be widely used.

While some labels can be easily set using --label from the CLI.
e.g. authors, documentation, url, ...
other labels would require evaluation of the Dockerfile with the args.
E.g. base images and resolved digests, ...
base.name,
base.digest
AFAIK there might also be several base images: base-build and base-runtime, ...

Is this on other peoples' minds? Is there already a feature request for that?

Thanks for the help!