Best way to publish container reports

[nicorikken]

I'm trying out Tern as a way to provide package details alongside the container for transparency and to better comply with license requirements. (The current report doesn't seem sufficient to comply with attribution requirements of most licenses, but that might improve in the future.) What would be the best way to publish the report alongside the resulting container? I'm using Tern as part of the build process. I thought to build a new container that adds the Tern report to the workdir and publishes this new container instead. In this way the information is available through the normal container interfaces and there is no need to setup a different method of publication.