Notation is a command-line tool for signing and verifying software artifacts. It is designed for the OCI registry ecosystem and implements the Notary Project specifications.
The software can add signatures to container images and other OCI artifacts and subsequently verify those signatures. This provides a mechanism for establishing the authenticity and integrity of artifacts distributed through registries.
Notation supports plugins, allowing signing workflows to integrate with external key management systems and signing services.
This is free and open source software.
Key Features
- Sign container images and other OCI artifacts.
- Verify signatures associated with OCI artifacts.
- Implements the Notary Project specifications.
- Store signatures alongside artifacts in OCI registries.
- Plugin system for external signing and key management services.
- Suitable for software supply chain security workflows.
Website: github.com/notaryproject/notation
Support:
Developer: Notary Project
License: Apache License 2.0
Notation is written in Go. Learn Go with our recommended free books and free tutorials.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.