{"id":13643449,"url":"https://github.com/notaryproject/notation","last_synced_at":"2026-01-12T06:37:37.963Z","repository":{"id":37389356,"uuid":"257347648","full_name":"notaryproject/notation","owner":"notaryproject","description":"A CLI tool to sign and verify artifacts","archived":false,"fork":false,"pushed_at":"2025-05-13T05:29:16.000Z","size":13222,"stargazers_count":405,"open_issues_count":57,"forks_count":90,"subscribers_count":13,"default_branch":"main","last_synced_at":"2025-05-13T06:27:18.531Z","etag":null,"topics":["cloud-native","cncf","container","kubernetes","sign","verify"],"latest_commit_sha":null,"homepage":"https://notaryproject.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/notaryproject.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2020-04-20T16:56:00.000Z","updated_at":"2025-05-13T05:59:15.000Z","dependencies_parsed_at":"2022-07-14T06:10:31.145Z","dependency_job_id":"8bfd2565-621b-466c-973b-efe75d786e0a","html_url":"https://github.com/notaryproject/notation","commit_stats":{"total_commits":441,"total_committers":47,"mean_commits":9.382978723404255,"dds":0.6235827664399093,"last_synced_commit":"b2d5facf72ae0cdfa32922df4ede8d48c725f48e"},"previous_names":["notaryproject/nv2"],"tags_count":48,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/notaryproject%2Fnotation","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/notaryproject%2Fnotation/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/notaryproject%2Fnotation/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/notaryproject%2Fnotation/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/notaryproject","download_url":"https://codeload.github.com/notaryproject/notation/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254190396,"owners_count":22029632,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cloud-native","cncf","container","kubernetes","sign","verify"],"created_at":"2024-08-02T01:01:47.784Z","updated_at":"2026-01-12T06:37:37.949Z","avatar_url":"https://github.com/notaryproject.png","language":"Go","funding_links":[],"categories":["Identity, signing and provenance","Signing Artefacts","Go","Artifact Signing \u0026 Verification"],"sub_categories":["Supply chain beyond libraries"],"readme":"# Notation\n\n[![Go Report Card](https://goreportcard.com/badge/github.com/notaryproject/notation)](https://goreportcard.com/report/github.com/notaryproject/notation)\n[![codecov](https://codecov.io/gh/notaryproject/notation/branch/main/graph/badge.svg)](https://codecov.io/gh/notaryproject/notation)\n[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/notaryproject/notation/badge)](https://api.securityscorecards.dev/projects/github.com/notaryproject/notation)\n\nNotation is a CLI project to add signatures as standard items in the OCI registry ecosystem, and to build a set of simple tooling for signing and verifying these signatures. This should be viewed as similar security to checking git commit signatures, although the signatures are generic and can be used for additional purposes. Notation is an implementation of the [Notary Project specifications][notaryproject-specs].\n\nYou can find the Notary Project [README](https://github.com/notaryproject/.github/blob/main/README.md) to learn about the overall Notary Project.\n\n\u003e [!NOTE]\n\u003e The documentation for installing Notation CLI is available [here](https://notaryproject.dev/docs/user-guides/installation/cli/).\n\n## Table of Contents\n\n  - [Quick Start](#quick-start)\n  - [Community](#community)\n    - [Development and Contributing](#development-and-contributing)\n    - [Notary Project Community Meeting](#notary-project-community-meeting)\n  - [Release Management](#release-management)\n  - [Support](#support)\n  - [Code of Conduct](#code-of-conduct)\n  - [License](#license)\n\n## Quick Start\n\n- [Quick start: Sign and validate a container image](https://notaryproject.dev/docs/quickstart-guides/quickstart-sign-image-artifact/)\n- [Try out Notation in this Killercoda interactive sandbox environment](https://killercoda.com/notaryproject/scenario/notation)\n- Build, sign, and verify container images using Notation with [Azure Key Vault](https://docs.microsoft.com/azure/container-registry/container-registry-tutorial-sign-build-push?wt.mc_id=azurelearn_inproduct_oss_notaryproject) or [AWS Signer](https://docs.aws.amazon.com/signer/latest/developerguide/container-workflow.html)\n\n## Community\n\nNotary Project is a [CNCF Incubating project](https://www.cncf.io/projects/notary/). We :heart: your contribution.\n\n### Development and Contributing\n\n- [Build Notation from source code](/building.md)\n- [Governance for Notary Project](https://github.com/notaryproject/.github/blob/master/GOVERNANCE.md)\n- [Maintainers and reviewers list](https://github.com/notaryproject/notation/blob/main/CODEOWNERS)\n- [Contributing Guide](https://github.com/notaryproject/.github/blob/main/CONTRIBUTING.md)\n- Regular conversations for Notary Project occur on the [Cloud Native Computing Slack](https://slack.cncf.io/) **notary-project** channel.\n\n### Notary Project Community Meeting\n\nYou can choose one of the following two meeting series based on your time zone ([Convert the UTC time to your local time](https://dateful.com/convert/utc)).\n\n- APAC-friendly series: Every 2 weeks on Tuesday from 1:30 AM to 2:30 AM UTC at [Zoom meetng room 92845115383](https://zoom.us/j/92845115383). Please download and import the [iCalendar (.ics) file](https://zoom.us/meeting/tJYlc-yprz4pEtfURgkU87H92Lp5_tEUFUlU/ics?icsToken=DFsuxg27fSEsMo7tewAALAAAAGAjUyl-OF5plM9lOFCrpHnZXosEXk5n-tLtsqKh536tFi9N6wUbHvDObIuPsqNHNdm01l7wM7eyL1d_rDAwMDAwMQ\u0026meetingMasterEventId=3KMpeJ5TS6G9a3N4vuLuHg) to your calendar system.\n- U.S.-friendly series: Every 2 weeks on Wednesday from 4:00 PM to 5:00 PM UTC at [Zoom meetng room 95363269801](https://zoom.us/j/95363269801). Please download and import the [iCalendar (.ics) file](https://www.zoom.us/meeting/tJEuceqqqDIiGtUQKXiRMH44tFHULzhkHZ-T/ics?meetingMasterEventId=5QOyHuxhS0KKE5L-X-w41A) to your calendar system.\n\nPlease see the [CNCF Calendar](https://www.cncf.io/calendar/) for details. You can log in to hackmd.io to add your topics to the [meeting agenda](https://hackmd.io/@EG2api1FTUudGEK6PMjvuQ/rk30ceMAyl). \n\n## Release Management\n\nThe Notation release process is defined in [RELEASE_MANAGEMENT.md](RELEASE_MANAGEMENT.md#supported-releases).\n\n## Support\n\nSupport for the Notation project is defined in [supported releases](RELEASE_MANAGEMENT.md#supported-releases).\n\n## Code of Conduct\n\nThis project has adopted the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md). See [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) for further details.\n\n## License\n\nThis project is covered under the Apache 2.0 license. You can read the license [here](LICENSE).\n\n[notation-releases]:      https://github.com/notaryproject/notation/releases\n[notaryproject-specs]:         https://github.com/notaryproject/notaryproject\n[artifact-manifest]:      https://github.com/oras-project/artifacts-spec/blob/main/artifact-manifest.md\n[cncf-distribution]:      https://github.com/oras-project/distribution\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnotaryproject%2Fnotation","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnotaryproject%2Fnotation","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnotaryproject%2Fnotation/lists"}