Notation
A command-line tool from the Notary Project for signing and verifying container images and OCI artifacts.
ProprietaryBy The Notary Project contributors
Compare Notation with another product
1 more way to get Notation
Homebrewbrew install notation
Alternatives
See all alternatives
About Notation
Notation is the command-line tool of the Notary Project, a set of specifications and tools for securing software supply chains. It signs container images and other OCI artifacts and verifies those signatures before they are used, using standard PKI with COSE and JWS signature formats.
Trust policies let you decide which signed artifacts count as authentic, for example only those signed by trusted identities and pulled from trusted registries. Online and air-gapped signing are both supported, and the v2.0.0 alpha adds signing and verification of arbitrary blobs.
Strengths
- Signs any OCI artifact, not only container images
- Fine-grained trust policies for identities and registries
- Supports air-gapped signing
- Built on standard PKI with COSE and JWS formats
Limitations
- Aimed at DevOps and security teams rather than desktop users
- Blob signing is still in an alpha release
Details
- Pricing
- FreeNo paid edition is mentioned; it is developed as a community project.
- License
- Proprietary
- Developer
- The Notary Project contributors
- Platforms
- Command line
- How it runs
- Downloadable app
- Best suited for
- DevOps teams that need to sign and verify container images in a supply chain
- Categories
- Container tools, Security tools, Developer tools
- Last verified
- Added
- Sources