Introducing rules_oci
Blog post from Aspect Build
Google has announced the general availability of version 1.0 of rules_oci, an open-sourced Bazel plugin designed to simplify and secure the building of container images, marking a significant improvement over its predecessor, rules_docker. Developed in collaboration with Aspect and the Rules Authors Special Interest Group, rules_oci is now the recommended ruleset for Docker/OCI, supporting the Open Container Initiative standard. It offers enhanced features like native support for multi-architecture images, code signing to verify image integrity, and the ability to work without a pre-installed Docker daemon, making it more maintainable and adaptable to diverse container runtimes and image formats. The plugin improves supply chain security through minimal base images and aligns with Bazel's Trust-on-First-Use principle, benefiting projects like Google's Distroless base images by providing a Software Bill of Materials and eliminating race conditions in image signing processes. With resources available from Aspect for migration and support, this release invites current users of rules_docker and new adopters to transition to rules_oci, contributing to its development and ensuring its continued evolution as an open-source project.