# GHCR.io source provenance bug

Problem: [a particular OCI image](https://github.com/users/ahmetb/packages/container/grpc-health-probe/1953395) that I manually label/push to **ghcr.io** doesn't get associated to Git tag/commit (just the repo):

> 

If I look at [another image](https://github.com/linkedin/Burrow/packages/104930)** that is hosted on** **`docker.pkg.github.com`** has this information:

> 

I note that this image (linkedin/burrow) has the following OCI labels:

docker inspect docker.pkg.github.com/linkedin/burrow/burrow:v1.3.6
...
            "Labels": {
                "maintainer": "LinkedIn Burrow https://github.com/linkedin/Burrow",
                "org.label-schema.name": "Burrow",
                "org.label-schema.schema-version": "1.0",
                "org.label-schema.vcs": "https://github.com/linkedin/Burrow",
                "org.label-schema.vcs-ref": "2808a3ea61f31ff61e0be96bb10bcc35a84d5243",
                "org.label-schema.version": "1.3.6"
            }

However, when I provide the same set of labels, my commit/tag info is not listed (as seen in first screenshot):

            "Labels": {
                "maintainer": "ahmetb grpc-health-probe https://github.com/ahmetb/grpc-health-probe",
                "org.label-schema.name": "grpc-health-probe",
                "org.label-schema.schema-version": "1.0",
                "org.label-schema.vcs": "https://github.com/ahmetb/grpc-health-probe",
                "org.label-schema.vcs-ref": "7578cd11b82cd4b99617a677ba243536cc836663",
                "org.label-schema.version": "0.3.7-rc.1"
            }

I also tried it with the [new OCI image annotations](https://github.com/opencontainers/image-spec/blob/master/annotations.md#back-compatibility-with-label-schema) that GHCR [claims to support](https://docs.github.com/en/packages/guides/connecting-a-repository-to-a-container-image#connecting-a-repository-to-a-container-image-on-the-command-line). But the result is the same, even with these new labels:

            "Labels": {
                "maintainer": "ahmetb grpc-health-probe https://github.com/ahmetb/grpc-health-probe",
                "org.opencontainers.image.revision": "85a6f272e371d439b3c5911932f2000cc60fbcc7",
                "org.opencontainers.image.source": "https://github.com/ahmetb/grpc-health-probe",
                "org.opencontainers.image.title": "grpc-health-probe",
                "org.opencontainers.image.version": "0.3.7-rc.0"
            }

So I'm starting to suspect these labels are not supported properly on **`ghcr.io`** (but **`docker.pkg.github.com`** works.).

Contact @ahmetb for details if necessary.