upgrade to oras 1.0.0 and fix issue with 0 length config (aquasecurity#305)

Author: rdjones517

.github/workflows/cron.yml

@@ -51,16 +51,16 @@ jobs:
 
       - name: Install oras
         run: |
-          # oras was rollbacked to v0.12.0, because now v0.13.0 (the latest version) contains bugs: https://github.com/oras-project/oras/issues/447
-          curl -LO https://github.com/oras-project/oras/releases/download/v0.12.0/oras_0.12.0_linux_amd64.tar.gz
-          tar -xvf ./oras_0.12.0_linux_amd64.tar.gz
+          # upgrade to ORAS 1.0.0
+          curl -LO https://github.com/oras-project/oras/releases/download/v1.0.0/oras_1.0.0_linux_amd64.tar.gz
+          tar -xvf ./oras_1.0.0_linux_amd64.tar.gz
 
       - name: Upload assets to GHCR
         run: |
           ./oras version
           tags=(latest ${{ env.VERSION }})
           for tag in ${tags[@]}; do
-            ./oras push ghcr.io/${{ github.repository }}:${tag} \
-              --manifest-config /dev/null:application/vnd.aquasec.trivy.config.v1+json \
+            ./oras push --artifact-type application/vnd.aquasec.trivy.config.v1+json \
+              ghcr.io/${{ github.repository }}:${tag} \
               db.tar.gz:application/vnd.aquasec.trivy.db.layer.v1.tar+gzip
           done