Attaching a patch manifest to the original image

[sajayantony]

Is there a desire to attach something like a patch manifest to the original image.
If the current image that is being used has a updated version is there a possibility that copa can help attach a referernce type artifact to the original image such that vulnerability scanners or builders can identity the recommended patched image that it needs to use.

This document might help describe and illustrate this idea - https://hackmd.io/Recs8CtORA6w49fRVX-GBw