NOTARY-V2

CNCF Notation V2 standard for OCI signing.

Definition

Notation v1.0 (GA 2023): JWS format signature with X.509 chains, key management plugins (AWS KMS, Azure Key Vault, HashiCorp Vault). Difference: Sigstore is OIDC-keyless ; Notation is traditional X.509. Adopted by AWS Signer, Azure ACR Sign.

Origin

Docker, Microsoft, AWS initiative since 2020 ; rebranded Notation 2023.

Example in context

notation sign $IMAGE --signature-format jws — produces JWS signature.

Related terms

• Cosign — Sigstore alternative.