diff --git a/389-ds-container.changes b/389-ds-container.changes
index 5b2496a..e1405c8 100644
--- a/389-ds-container.changes
+++ b/389-ds-container.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Aug  5 11:38:13 UTC 2024 - Dirk Mueller <dmueller@suse.com>
+
+- add OCI reference annotation
+
 -------------------------------------------------------------------
 Sat Aug  3 08:56:51 UTC 2024 - Dirk Mueller <dmueller@suse.com>
 
diff --git a/Dockerfile b/Dockerfile
index fecdf6b..e651c0c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -35,6 +35,7 @@ LABEL org.openbuildservice.disturl="%DISTURL%"
 LABEL org.opensuse.lifecycle-url="https://en.opensuse.org/Lifetime#openSUSE_BCI"
 LABEL org.opensuse.release-stage="released"
 # endlabelprefix
+LABEL org.opencontainers.image.revision="%DISTURL%"
 LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/SUSE/BCI-dockerfile-generator/Tumbleweed/389-ds-container/README.md"
 
 RUN set -euo pipefail; zypper -n in --no-recommends 389-ds timezone openssl nss_synth; zypper -n clean; rm -rf /var/log/{lastlog,tallylog,zypper.log,zypp/history,YaST2}