add annotations to container image

.github/workflows/ci-cd.yaml

@@ -184,6 +184,8 @@ jobs:
         uses: docker/[email protected]
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          annotations: |
+            org.opencontainers.image.revision=${{ github.sha }}
           # I don't know how to tell docker-metadata-action to extract the
           # license, so I set it here explicitly.
           # https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/
@@ -205,8 +207,9 @@ jobs:
             BB_VERSION=1.4.192
             CREATED_DATE=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
             JSOUP_POD_VERSION=0.4.0
-          tags: ${{ steps.meta.outputs.tags }}
+          annotations: ${{ steps.meta.outputs.annotations }}
           labels: ${{ steps.meta.outputs.labels }}
+          tags: ${{ steps.meta.outputs.tags }}
 
       # https://github.com/marketplace/actions/attest-build-provenance
       - name: Generate artifact attestation