Repositories list

• ratify

  Public
  Artifact Ratification Framework (CNCF Sandbox)

  kubernetessecure-supply-chain

  Go

  •

  Apache License 2.0

  •71•274•130•3•Updated Aug 20, 2025Aug 20, 2025

• ratify-verifier-go

  Public
  Go

  •

  Apache License 2.0

  •4•0•5•0•Updated Aug 20, 2025Aug 20, 2025

• notation

  Public
  A CLI tool to sign and verify artifacts

  kubernetesverifycontainer+ 3cncfcloud-nativesign

  Go

  •

  Apache License 2.0

  •88•419•49•0•Updated Aug 20, 2025Aug 20, 2025

• notation-go

  Public
  A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.

  Go

  •

  Apache License 2.0

  •43•41•13•1•Updated Aug 20, 2025Aug 20, 2025

• ratify-go

  Public
  Ratify Go library

  goverificationartifact+ 1ratify

  Go

  •

  Apache License 2.0

  •4•4•13•2•Updated Aug 20, 2025Aug 20, 2025

• notation-core-go

  Public
  Contains support for Notary Project signature envelope, and format specific implementation

  Go

  •

  Apache License 2.0

  •29•16•4•3•Updated Aug 19, 2025Aug 19, 2025

• notation-action

  Public
  GitHub Actions for signing and verifying artifacts with Notation

  verifysigningcontainer+ 4notationsigncicdsupply-chain-security

  TypeScript

  •

  Apache License 2.0

  •9•20•6•2•Updated Aug 18, 2025Aug 18, 2025

• ratify-containerd

  Public
  ratify containerd PoC

  kubernetescontainerdsecure-supply-chain

  Go

  •

  Apache License 2.0

  •3•4•0•4•Updated Aug 18, 2025Aug 18, 2025

• ratify-web

  Public
  MDX

  •

  Apache License 2.0

  •16•6•24•0•Updated Jul 30, 2025Jul 30, 2025

• .github

  Public
  Organization-wide repository for common governance documents.

  Apache License 2.0

  •5•3•16•0•Updated Jul 10, 2025Jul 10, 2025

• tspclient-go

  Public
  Golang implementation of the Time-Stamp Protocol (TSP) client as specified in RFC3161

  gotimestamprfc3161

  Go

  •

  Apache License 2.0

  •4•12•0•0•Updated Jun 30, 2025Jun 30, 2025

• notaryproject.dev

  Public
  Notary Project Website

  HTML

  •

  Other

  •63•27•1•0•Updated Jun 9, 2025Jun 9, 2025

• specifications

  Public
  Cross tooling and interoperability specifications

  supply-chainsign

  Apache License 2.0

  •45•173•14•2•Updated May 20, 2025May 20, 2025

• notation-hashicorp-vault

  Public
  HashiCorp Vault provider for Notation

  pluginkmsvault+ 4cncfnotationsignharshicorp

  Go

  •

  Apache License 2.0

  •7•8•4•6•Updated Feb 26, 2025Feb 26, 2025

• notation-plugin-framework-go

  Public
  Contains framework or base for notation plugins

  Go

  •

  Apache License 2.0

  •5•3•0•3•Updated Jan 27, 2025Jan 27, 2025

• notary

  Public archive
  Notary is a project that allows anyone to have trust over arbitrary collections of data

  cncfdockertrust

  Go

  •

  Apache License 2.0

  •520•3.3k•275•57•Updated Aug 7, 2024Aug 7, 2024

• tuf

  Public
  The Update Framework for OCI Registries

  Go

  •11•12•15•18•Updated Apr 9, 2024Apr 9, 2024

• roadmap

  Public archive
  Roadmap for Notary Project

  6•7•22•0•Updated Apr 8, 2024Apr 8, 2024

• meeting-notes

  Public
  An archive of notes captured at https://hackmd.io/_vrqBGAOSUC_VWvFzWruZw?view

  MIT License

  •8•3•2•0•Updated Apr 8, 2024Apr 8, 2024