Support signing attestations using Notary Project
Open
feature-request
feature-signing-and-verification
roadmap
triaged
- Dominant language
- No language data
- Stars
- 177
- Forks
- 137
- PR merge metrics
- No merged PRs in 30d
Description
Notary Project doesn't support signing attestations like for example in-toto attestations. The ask here is to enable Notary Project tooling to sign and store attestations into OCI registries. The following things need to be considered:
- Wrapping attestations in a widely-accepted format (like in-toto)
- Signing using COSE and JWS signature formats
- Support artifact signing in constrained environments (aka local disk signing)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.