notation
FIPS 140-3Integration & deliveryNotation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.
Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.
Notation is a CLI tool for developers and operators that provides a standard way to sign and verify OCI artifacts. Its main purpose is to secure container images and related artifacts in registries and CI/CD pipelines. It supports artifact signing, signature verification, trust policy enforcement, and integration with pluggable key managers such as AWS KMS and Azure Key Vault. Notation uses the OCI Referrers API to store and discover signatures in OCI-compliant registries.
The tool can secure a wide range of artifacts, from container images to Helm charts and SBOMs, making it useful for both small projects and enterprise supply chains. Notation excels at ensuring only trusted, signed artifacts are deployed, reducing the risk of tampering and enabling compliance in Kubernetes and automated workflows.