OCI Metadata Labels Broken When Using Hyperlinks

[mu88]

Hi @baronfel,

I’m encountering an issue when using the .NET SDK Container Building Tools where OCI metadata labels seem to break when they include hyperlinks.

Here’s the setup:

• Metadata is defined in https://github.com/mu88/mu88.Shared/blob/main/src/mu88.Shared/mu88.Shared.props#L3-L16.
• MSBuild properties are correctly evaluated (verified in https://github.com/mu88/RaspiFanController/blob/0780e22d89107421e164448d2f249d8a8c5e27ff/RaspiFanController/RaspiFanController.csproj#L18-L31).
• GitHub Actions output confirms the expected values:

GITHUB_REPOSITORY_OWNER: 'mu88'
GITHUB_SERVER_URL: 'https://github.com'
GITHUB_REPOSITORY: 'mu88/RaspiFanController'
GITHUB_SHA: '0780e22d89107421e164448d2f249d8a8c5e27ff'
ContainerAuthors: 'mu88'
ContainerDocumentationUrl: 'https://github.com/mu88/RaspiFanController/blob/0780e22d89107421e164448d2f249d8a8c5e27ff/README.md'
ContainerInformationUrl: 'https://github.com/mu88/pkgs/container/RaspiFanController'
ContainerLicenseExpression: 'https://github.com/mu88/blob/0780e22d89107421e164448d2f249d8a8c5e27ff/LICENSE.md'
ContainerRepository: 'mu88/RaspiFanController'
ContainerTitle: 'mu88/RaspiFanController'
ContainerVendor: 'mu88'
ContainerVersion: '0780e22d89107421e164448d2f249d8a8c5e27ff'

However, after pulling the image (docker pull ghcr.io/mu88/raspifancontroller:dev-chiseled-linux-arm64) and inspecting it (docker inspect ghcr.io/mu88/raspifancontroller:dev-chiseled-linux-arm64), the labels look like this:

            "Labels": {
                "com.docker.extension.changelog": "https",
                "com.docker.extension.publisher-url": "https",
                "net.dot.runtime.majorminor": "10.0",
                "net.dot.sdk.version": "10.0.100",
                "org.opencontainers.artifact.created": "2025-12-05T11",
                "org.opencontainers.image.authors": "mu88",
                "org.opencontainers.image.base.digest": "sha256:0fa702201717987569ab59e3f505ad597e9c8804a1b9a480498439080911b558",
                "org.opencontainers.image.base.name": "mcr.microsoft.com/dotnet/aspnet",
                "org.opencontainers.image.created": "2025-12-05T11",
                "org.opencontainers.image.documentation": "https",
                "org.opencontainers.image.licenses": "https",
                "org.opencontainers.image.title": "mu88/RaspiFanController",
                "org.opencontainers.image.url": "https",
                "org.opencontainers.image.vendor": "mu88",
                "org.opencontainers.image.version": "0780e22d89107421e164448d2f249d8a8c5e27ff"
            }

All hyperlink-based labels are truncated to just "https".

Why are these OCI metadata labels losing their full hyperlink values during the build/publish process? Is this a known issue with the SDK or container tooling? Any guidance on how to preserve the full URLs?

Thanks in advance!

[baronfel]

Woah that's fascinating - do you have a binlog I could look at here? My suspicion is that there's some MSBuild property escaping that mutilating the values somehow, but I can't confirm that easily without a binlog or doing a build myself.

[mu88]

Please see the attached msbuild.zip - imho the Target input looks okay, i.e. I'd expect the bug inside the Target:

[mu88]

It seems to happen only on GitHub Actions