Notation – sign and verify software artifacts

Notation is a command-line tool for signing and verifying software artifacts. It is designed for the OCI registry ecosystem and implements the Notary Project specifications.

The software can add signatures to container images and other OCI artifacts and subsequently verify those signatures. This provides a mechanism for establishing the authenticity and integrity of artifacts distributed through registries.

Notation supports plugins, allowing signing workflows to integrate with external key management systems and signing services.

This is free and open source software.

Key Features

• Sign container images and other OCI artifacts.
• Verify signatures associated with OCI artifacts.
• Implements the Notary Project specifications.
• Store signatures alongside artifacts in OCI registries.
• Plugin system for external signing and key management services.
• Suitable for software supply chain security workflows.

Website: github.com/notaryproject/notation
Support:
Developer: Notary Project
License: Apache License 2.0

Notation is written in Go. Learn Go with our recommended free books and free tutorials.

Related Software

Read our verdict in the software roundup.

LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software. We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README.