GitLab Container Registry does not accept application/spdx+json media type

I generate an SBOM using Trivy:

  • trivy image --format spdx-json -o image.sbom.json "$CI_REGISTRY_IMAGE:1.0.6" Then, I want to attach the SBOM to the image using oras:
  • oras attach --artifact-type application/spdx+json "$CI_REGISTRY_IMAGE:1.0.6" image.sbom.json

But then I get an error: Error response from registry: manifest invalid: manifest invalid: unknown media type: application/spdx+json If I use --artifact-type **text**/spdx+json it works. I have seen online that the official media type for the spdx+json format is application/spdx+json, not text. Can we add support for that?