Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/notaryproject/notation

A CLI tool to sign and verify artifacts
https://github.com/notaryproject/notation

cloud-native cncf container kubernetes sign verify

Last synced: 29 days ago
JSON representation

A CLI tool to sign and verify artifacts

Host: GitHub
URL: https://github.com/notaryproject/notation
Owner: notaryproject
License: apache-2.0
Created: 2020-04-20T16:56:00.000Z (about 4 years ago)
Default Branch: main
Last Pushed: 2024-05-22T17:12:18.000Z (about 1 month ago)
Last Synced: 2024-05-22T18:06:14.924Z (about 1 month ago)
Topics: cloud-native, cncf, container, kubernetes, sign, verify
Language: Go
Homepage: https://notaryproject.dev/
Size: 12 MB
Stars: 292
Watchers: 16
Forks: 84
Open Issues: 75
Metadata Files:
- Readme: README.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: CODEOWNERS

Lists

awesome-software-supply-chain-security - Notation - ![GitHub stars](https://img.shields.io/github/stars/notaryproject/notation?style=flat-square) - A project to add signatures as standard items in the registry ecosystem, and to build a set of simple tooling for signing and verifying these signatures. (Signing Artefacts)
awesome-software-supply-chain-security - notaryproject/notation: Notation is a project to add signatures as standard items in the registry ecosystem, and to build a set of simple tooling for signing and verifying these signatures. Based on Notary V2 standard.

README

        # Notation

[![Go Report Card](https://goreportcard.com/badge/github.com/notaryproject/notation)](https://goreportcard.com/report/github.com/notaryproject/notation)

[![codecov](https://codecov.io/gh/notaryproject/notation/branch/main/graph/badge.svg)](https://codecov.io/gh/notaryproject/notation)

[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/notaryproject/notation/badge)](https://api.securityscorecards.dev/projects/github.com/notaryproject/notation)

Notation is a CLI project to add signatures as standard items in the OCI registry ecosystem, and to build a set of simple tooling for signing and verifying these signatures. This should be viewed as similar security to checking git commit signatures, although the signatures are generic and can be used for additional purposes. Notation is an implementation of the [Notary Project specifications][notaryproject-specs].

You can find the Notary Project [README](https://github.com/notaryproject/.github/blob/main/README.md) to learn about the overall Notary Project.

> [!NOTE]

> The documentation for installing Notation CLI is available [here](https://notaryproject.dev/docs/user-guides/installation/cli/).

## Table of Contents

  - [Quick Start](#quick-start)

  - [Community](#community)

    - [Development and Contributing](#development-and-contributing)

    - [Notary Project Community Meeting](#notary-project-community-meeting)

  - [Release Management](#release-management)

  - [Support](#support)

  - [Code of Conduct](#code-of-conduct)

  - [License](#license)

## Quick Start

- [Quick start: Sign and validate a container image](https://notaryproject.dev/docs/quickstart-guides/quickstart-sign-image-artifact/)

- [Try out Notation in this Killercoda interactive sandbox environment](https://killercoda.com/notaryproject/scenario/notation)

- Build, sign, and verify container images using Notation with [Azure Key Vault](https://docs.microsoft.com/azure/container-registry/container-registry-tutorial-sign-build-push?wt.mc_id=azurelearn_inproduct_oss_notaryproject) or [AWS Signer](https://docs.aws.amazon.com/signer/latest/developerguide/container-workflow.html)

## Community

Notary Project is a [CNCF Incubating project](https://www.cncf.io/projects/notary/). We :heart: your contribution.

### Development and Contributing

- [Build Notation from source code](/building.md)

- [Governance for Notary Project](https://github.com/notaryproject/.github/blob/master/GOVERNANCE.md)

- [Maintainers and reviewers list](https://github.com/notaryproject/notation/blob/main/CODEOWNERS)

- Regular conversations for Notary Project occur on the [Cloud Native Computing Slack](https://slack.cncf.io/) **notary-project** channel.

### Notary Project Community Meeting

- Mondays 5-6 PM PDT, 4-5 PM PST, 8-9 PM EDT, 7-8 PM EST, 8-9 AM Shanghai

- Thursdays 9-10 AM PDT, 8-9 AM PST, 12 PM EDT, 11 AM EST, 5 PM UK

Join us at [Zoom Dial-in link](https://zoom.us/my/cncfnotaryproject) / Passcode: 77777. Please see the [CNCF Calendar](https://www.cncf.io/calendar/) for community meeting details. Meeting notes are captured on [hackmd.io](https://hackmd.io/_vrqBGAOSUC_VWvFzWruZw).

## Release Management

The Notation release process is defined in [RELEASE_MANAGEMENT.md](RELEASE_MANAGEMENT.md#supported-releases).

## Support

Support for the Notation project is defined in [supported releases](RELEASE_MANAGEMENT.md#supported-releases).

## Code of Conduct

This project has adopted the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md). See [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) for further details.

## License

This project is covered under the Apache 2.0 license. You can read the license [here](LICENSE).

[notation-releases]:      https://github.com/notaryproject/notation/releases

[notaryproject-specs]:         https://github.com/notaryproject/notaryproject

[artifact-manifest]:      https://github.com/oras-project/artifacts-spec/blob/main/artifact-manifest.md

[cncf-distribution]:      https://github.com/oras-project/distribution