notation

FIPS 140-3Integration & delivery

Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.

Variant

Image version	Type	Compliance	Pkg mgr	Shell	User	Size	Pushed	Vulns	Health
Distroless1.3.2-distroless-ad70bfed19bc	FIPS	FIPSSigned	—	busybox	nonroot (65532)	27.8 MB	Aug 24, 2026	None	A100
Distroless1.3.2-distroless-e8e091bcdec5	FIPS	FIPSSigned	—	busybox	nonroot (65532)	27.8 MB	Aug 24, 2026	None	A100
Debian1.3.2-516ffba4a6b8	Base	CISSigned	—	—	nonroot (65532)	4.0 MB	Aug 24, 2026	None	A100
Distroless1.3.2-distroless-3a210dcad133	FIPS	FIPSSigned	—	busybox	nonroot (65532)	27.8 MB	Aug 13, 2026	None	A100
Debian1.3.2-debian13-474d486c67ea	Base	CISSigned	—	—	nonroot (65532)	4.0 MB	Aug 10, 2026	None	A100
Alpine1.3.2-69b6a31a08ef	Base	CISSigned	—	—	nonroot (65532)	3.8 MB	Aug 10, 2026	None	A100
Alpine1.3.2-alpine3.23-077d784fc53c	Base	CISSigned	—	—	nonroot (65532)	3.8 MB	Aug 10, 2026	None	A100