Repositories list

• notation-go

  Public
  A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.

  Go

  •

  Apache License 2.0

  •4646 forks•4444 stars•1212 issues•55 pull requests•Updated Apr 23, 2026Apr 23, 2026

• notation

  Public
  A CLI tool to sign and verify artifacts

  kubernetesverifycontainer+ 3

  kubernetesverifycontainercncfcloud-nativesign

  Go

  •

  Apache License 2.0

  •9393 forks•478478 stars•4949 issues•1313 pull requests•Updated Apr 23, 2026Apr 23, 2026

• ratify

  Public
  Artifact Ratification Framework (CNCF Sandbox)

  kubernetessecure-supply-chain

  kubernetessecure-supply-chain

  Go

  •

  Apache License 2.0

  •7979 forks•290290 stars•135135 issues•2323 pull requests•Updated Apr 22, 2026Apr 22, 2026

• ratify-web

  Public
  MDX

  •

  Apache License 2.0

  •1616 forks•66 stars•2424 issues•66 pull requests•Updated Apr 15, 2026Apr 15, 2026

• notation-core-go

  Public
  Contains support for Notary Project signature envelope, and format specific implementation

  Go

  •

  Apache License 2.0

  •2929 forks•1414 stars•44 issues•44 pull requests•Updated Apr 13, 2026Apr 13, 2026

• notaryproject.dev

  Public
  Notary Project Website

  HTML

  •

  Other

  •6464 forks•2828 stars•22 issues•00 pull requests•Updated Mar 19, 2026Mar 19, 2026

• ratify-containerd

  Public
  ratify containerd PoC

  kubernetescontainerdsecure-supply-chain

  kubernetescontainerdsecure-supply-chain

  Go

  •

  Apache License 2.0

  •33 forks•55 stars•00 issues•66 pull requests•Updated Feb 16, 2026Feb 16, 2026

• notation-action

  Public
  GitHub Actions for signing and verifying artifacts with Notation

  verifysigningcontainer+ 4

  verifysigningcontainernotationsigncicdsupply-chain-security

  TypeScript

  •

  Apache License 2.0

  •88 forks•2020 stars•66 issues•77 pull requests•Updated Jan 12, 2026Jan 12, 2026

• ratify-verifier-go

  Public
  Go

  •

  Apache License 2.0

  •55 forks•00 stars•55 issues•99 pull requests•Updated Nov 20, 2025Nov 20, 2025

• ratify-go

  Public
  Ratify Go library

  goverificationartifact+ 1

  goverificationartifactratify

  Go

  •

  Apache License 2.0

  •44 forks•44 stars•1313 issues•66 pull requests•Updated Nov 10, 2025Nov 10, 2025

• .github

  Public
  Organization-wide repository for common governance documents.

  Apache License 2.0

  •55 forks•33 stars•1616 issues•00 pull requests•Updated Jul 10, 2025Jul 10, 2025

• tspclient-go

  Public
  Golang implementation of the Time-Stamp Protocol (TSP) client as specified in RFC3161

  gotimestamprfc3161

  gotimestamprfc3161

  Go

  •

  Apache License 2.0

  •33 forks•1111 stars•00 issues•00 pull requests•Updated Jun 30, 2025Jun 30, 2025

• specifications

  Public
  Cross tooling and interoperability specifications

  supply-chainsign

  supply-chainsign

  Apache License 2.0

  •4444 forks•175175 stars•1414 issues•11 pull request•Updated May 20, 2025May 20, 2025

• notation-hashicorp-vault

  Public
  HashiCorp Vault provider for Notation

  pluginkmsvault+ 4

  pluginkmsvaultcncfnotationsignharshicorp

  Go

  •

  Apache License 2.0

  •77 forks•99 stars•44 issues•66 pull requests•Updated Feb 26, 2025Feb 26, 2025

• notation-plugin-framework-go

  Public
  Contains framework or base for notation plugins

  Go

  •

  Apache License 2.0

  •55 forks•33 stars•00 issues•33 pull requests•Updated Jan 27, 2025Jan 27, 2025

• notary

  Public archive
  Notary is a project that allows anyone to have trust over arbitrary collections of data

  dockercncftrust

  dockercncftrust

  Go

  •

  Apache License 2.0

  •521521 forks•3.3k3.3k stars•275275 issues•5757 pull requests•Updated Aug 7, 2024Aug 7, 2024

• tuf

  Public
  The Update Framework for OCI Registries

  Go

  •1111 forks•1212 stars•1515 issues•1818 pull requests•Updated Apr 9, 2024Apr 9, 2024

• roadmap

  Public archive
  Roadmap for Notary Project

  66 forks•77 stars•2222 issues•00 pull requests•Updated Apr 8, 2024Apr 8, 2024

• meeting-notes

  Public
  An archive of notes captured at https://hackmd.io/_vrqBGAOSUC_VWvFzWruZw?view

  MIT License

  •88 forks•33 stars•22 issues•00 pull requests•Updated Apr 8, 2024Apr 8, 2024