The resulting OCI artifact does not have a stable checksum. #32
Description
The The resulting OCI artifact that gets downloaded does not have a stable checksum.
In cionjunction with FluxCD, this results on a "new" detected artifact, each time the OCIRepository gets reconciled:
e.g. with hetstack/cert-manager:
Normal ArtifactUpToDate 47h source-controller artifact up-to-date with remote revision: '1.13.3@sha256:01670a198f036bb7b4806c70f28c81097a1c1ae993e6e7e9668ceea3c9800d69'
Normal ArtifactUpToDate 43h source-controller artifact up-to-date with remote revision: '1.13.3@sha256:2565063055a68c060dcd8754f5395bc48ebcf974799a9647d077f644bf29a584'
Normal ArtifactUpToDate 41h source-controller artifact up-to-date with remote revision: '1.13.3@sha256:e3d7f4eb00c95d556c372f2b8a3a7c8a8c28ba019f3e10928e118963d083e786'
Normal ArtifactUpToDate 38h source-controller artifact up-to-date with remote revision: '1.13.3@sha256:b8d6f76c8c90b5c99eb0cfd7eb21bc5368c9006c5f882121d647c5cbddcc8203'
Normal ArtifactUpToDate 36h source-controller artifact up-to-date with remote revision: '1.13.3@sha256:d7d92b499afeb5d8679fc68149299a127c181f516d732496d4a3a674a17109a7'
Normal ArtifactUpToDate 34h source-controller artifact up-to-date with remote revision: '1.13.3@sha256:8e2675a792a92485e33efec225d489ae092e30bc03e02840c7e14514323253c2'
Which in turn triggers a helm upgrade each time.