The notation repo contains the following:
notation- A CLI for signing and verifying artifacts with Notationdocker-generate- Extends docker withdocker generateto create locally persisted manifest for signing, without having to push to a registry.docker-notation- Extends docker withdocker notationto enable, sign and verify Notation signatures.
Building above binaries require golang with version >= 1.17.
- Build the binaries, installing them to:
~/bin/notation~/.docker/cli-plugins/docker-generate~/.docker/cli-plugins/docker-notation
git clone https://github.com/notaryproject/notation.git cd notation make install - Verify binaries are installed
docker --help # look for Management Commands: generate* Generate artifacts (CNCF Notary Project, 0.1.0) notation* Manage signatures on Docker images (CNCF Notary Project, 0.5.3-alpha) which notation # output /home/<user>/bin/notation