Add option to annotate resources, to enable vulnerability identification
Metadata
Current evaluation
No evaluation has been recorded for this issue yet.
Issue body
### What needs to get done
When we run `charmcraft resource-revisions`, there should be an additional column, which users could utilize to indicate workload version.
### Why it needs to get done
Currently, resource revisions are opaque, and there is no way to know, without deploying, which workload version is where:
```
$ charmcraft resource-revisions prometheus-k8s prometheus-image
Revision Created at Size Architectures
151 2024-09-06T19:19:58Z 512B all
150 2024-08-23T08:46:48Z 512B amd64
149 2024-07-16T14:44:50Z 512B all
```
This poses a difficulty for vulnerability identification: we need to be able to generate a list of charm revisions that are affected by a certain CVE.
Evaluation history
No evaluation history available.