Output of 'oras discover' has changed in v1.3.0

[malice00]

What happened in your environment?

The output of the discover command has changed. According to the documentation, it should still have been the same.

Output in v1.3.0:

oras discover --format json --platform linux/amd64 ghcr.io/cyclonedx/opensuse-lang@sha256:84b639892598fb3c92e4511e9d0ecf348b9ece28bef3f40ca25fc0d002867be6  
{
  "reference": "ghcr.io/cyclonedx/opensuse-lang@sha256:84b639892598fb3c92e4511e9d0ecf348b9ece28bef3f40ca25fc0d002867be6",
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "digest": "sha256:84b639892598fb3c92e4511e9d0ecf348b9ece28bef3f40ca25fc0d002867be6",
  "size": 678,
  "referrers": [
    {
      "reference": "ghcr.io/cyclonedx/opensuse-lang@sha256:21868b1158e16efc9fbafce612f4fa610917b47767bb0f814ba717f06ce96c88",
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:21868b1158e16efc9fbafce612f4fa610917b47767bb0f814ba717f06ce96c88",
      "size": 777,
      "annotations": {
        "org.opencontainers.image.created": "2025-09-10T18:40:31Z"
      },
      "artifactType": "sbom/cyclonedx",
      "referrers": []
    }
  ]
}

What did you expect to happen?

I expected it to be the same as before, or if not, to have the documentation reflect the change.

Expected output:

oras discover --format json --platform linux/amd64 ghcr.io/cyclonedx/opensuse-lang@sha256:84b639892598fb3c92e4511e9d0ecf348b9ece28bef3f40ca25fc0d002867be6 
{
  "manifests": [
    {
      "reference": "ghcr.io/cyclonedx/opensuse-lang@sha256:21868b1158e16efc9fbafce612f4fa610917b47767bb0f814ba717f06ce96c88",
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:21868b1158e16efc9fbafce612f4fa610917b47767bb0f814ba717f06ce96c88",
      "size": 777,
      "annotations": {
        "org.opencontainers.image.created": "2025-09-10T18:40:31Z"
      },
      "artifactType": "sbom/cyclonedx"
    }
  ]
}

How can we reproduce it?

Run the following command with v1.2.0 and v1.3.0 and compare:

oras discover --format json --platform linux/amd64 ghcr.io/cyclonedx/opensuse-lang@sha256:84b639892598fb3c92e4511e9d0ecf348b9ece28bef3f40ca25fc0d002867be6

What is the version of your ORAS CLI?

v1.3.0

What is your OS environment?

MacOS 15.6.1

Are you willing to submit PRs to fix it?

• Yes, I am willing to fix it.

[FeynmanZhou]

Good catch. The doc is outdated.

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

[Iam-Karan-Suresh]

Hello @TerryHowe @FeynmanZhou,

Thanks for confirming that the documentation is outdated.
I’d like to work on fixing this by updating the docs to reflect the ORAS v1.3.0 oras discover output and adding a short note about the behavior change.

Could you please assign this issue to me? I’m happy to submit a PR.

Thanks!

[TerryHowe]

We tend not to assign here, but I'd love to see a PR, thanks!

[Iam-Karan-Suresh]

Hi @TerryHowe ,

I’ve opened a PR to update the documentation for oras discover to reflect the current output format in ORAS v1.3.0, as discussed in this issue.

Please have a look when you get a chance. Thanks!