Repositories list

• notaryproject.dev

  Public
  Notary Project Website

  HTML

  •

  Other

  •64•27•2•0•Updated Mar 19, 2026Mar 19, 2026

• notation-core-go

  Public
  Contains support for Notary Project signature envelope, and format specific implementation

  Go

  •

  Apache License 2.0

  •29•15•4•2•Updated Mar 16, 2026Mar 16, 2026

• notation-go

  Public
  A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.

  Go

  •

  Apache License 2.0

  •46•43•12•3•Updated Mar 16, 2026Mar 16, 2026

• ratify-web

  Public
  MDX

  •

  Apache License 2.0

  •16•6•24•3•Updated Mar 13, 2026Mar 13, 2026

• ratify

  Public
  Artifact Ratification Framework (CNCF Sandbox)

  kubernetessecure-supply-chain

  kubernetessecure-supply-chain

  Go

  •

  Apache License 2.0

  •79•287•134•23•Updated Mar 5, 2026Mar 5, 2026

• notation

  Public
  A CLI tool to sign and verify artifacts

  kubernetesverifycontainer+ 3

  kubernetesverifycontainercncfcloud-nativesign

  Go

  •

  Apache License 2.0

  •94•470•49•12•Updated Feb 18, 2026Feb 18, 2026

• ratify-containerd

  Public
  ratify containerd PoC

  kubernetescontainerdsecure-supply-chain

  kubernetescontainerdsecure-supply-chain

  Go

  •

  Apache License 2.0

  •3•5•0•6•Updated Feb 16, 2026Feb 16, 2026

• notation-action

  Public
  GitHub Actions for signing and verifying artifacts with Notation

  verifysigningcontainer+ 4

  verifysigningcontainernotationsigncicdsupply-chain-security

  TypeScript

  •

  Apache License 2.0

  •8•20•6•7•Updated Jan 12, 2026Jan 12, 2026

• ratify-verifier-go

  Public
  Go

  •

  Apache License 2.0

  •5•0•5•9•Updated Nov 20, 2025Nov 20, 2025

• ratify-go

  Public
  Ratify Go library

  goverificationartifact+ 1

  goverificationartifactratify

  Go

  •

  Apache License 2.0

  •4•4•13•6•Updated Nov 10, 2025Nov 10, 2025

• .github

  Public
  Organization-wide repository for common governance documents.

  Apache License 2.0

  •5•3•16•0•Updated Jul 10, 2025Jul 10, 2025

• tspclient-go

  Public
  Golang implementation of the Time-Stamp Protocol (TSP) client as specified in RFC3161

  gotimestamprfc3161

  gotimestamprfc3161

  Go

  •

  Apache License 2.0

  •3•11•0•0•Updated Jun 30, 2025Jun 30, 2025

• specifications

  Public
  Cross tooling and interoperability specifications

  supply-chainsign

  supply-chainsign

  Apache License 2.0

  •44•174•14•1•Updated May 20, 2025May 20, 2025

• notation-hashicorp-vault

  Public
  HashiCorp Vault provider for Notation

  pluginkmsvault+ 4

  pluginkmsvaultcncfnotationsignharshicorp

  Go

  •

  Apache License 2.0

  •7•9•4•6•Updated Feb 26, 2025Feb 26, 2025

• notation-plugin-framework-go

  Public
  Contains framework or base for notation plugins

  Go

  •

  Apache License 2.0

  •5•3•0•3•Updated Jan 27, 2025Jan 27, 2025

• notary

  Public archive
  Notary is a project that allows anyone to have trust over arbitrary collections of data

  dockercncftrust

  dockercncftrust

  Go

  •

  Apache License 2.0

  •520•3.3k•273•57•Updated Aug 7, 2024Aug 7, 2024

• tuf

  Public
  The Update Framework for OCI Registries

  Go

  •11•12•15•18•Updated Apr 9, 2024Apr 9, 2024

• roadmap

  Public archive
  Roadmap for Notary Project

  6•7•22•0•Updated Apr 8, 2024Apr 8, 2024

• meeting-notes

  Public
  An archive of notes captured at https://hackmd.io/_vrqBGAOSUC_VWvFzWruZw?view

  MIT License

  •8•3•2•0•Updated Apr 8, 2024Apr 8, 2024