Skip to content

Latest commit

 

History

History
38 lines (26 loc) · 3.22 KB

v2.0.0.beta-1.MD

File metadata and controls

38 lines (26 loc) · 3.22 KB

Notary v2 Beta 1 Release

Overview

Notary v2 working group is pleased to announce its first Beta-1 release. Refer release definitions here. This release is just for Notation client and the two libraries that are used to build Notation client.

Goal of the release

  • Update "Notation" (CLI client) implementation to match the latest specifications. With the new client, users can sign and verify OCI registry artifacts
  • Enabled use of Trust store and trust policy for signature verification

We do not recommend this release for use in production environment. Refer release definitions here. We suggest using it for testing and providing feedback to the Notary v2 working group only

List of feature/capabilities added with this release

For detailed notes on each of the individual repositories (Notation (for reference CLI implementation) and Notation libraries) users can refer to the individual release notes. A summary view is provided in this document.

Notation CLI Client

Notation is a standalone CLI client based on Notary v2 specs. It supports signing, verifying, and storing signatures in registries supporting signatures as references to images.

  • In this release of Notation command, the CLI command spec was updated with examples.
  • Notation certificate command was enhanced to add/update certificates using the new directory-based structure of trust store

To start using Notation Refer: https://notaryproject.dev/docs/quickstart/

Notation Library

Written in the GO language the Library is divided up into two separate repos - Notation-go and Notation-core-go

List of fixed issues

Refer individual release notes for details.

Roadmap Guidance

This is not an exhaustive list. Users should refer to the Notary v2 roadmap at https://github.com/notaryproject/roadmap#readme for seeing the plan for subsequent releases and refer to individual subprojects (repositories) releases notes for details

  1. Alternate signature storage schemes which can use OCI Distribution 1.0 based registries is under investigation for a future release

Backwards Compatibility

This version of Notation client is not compatible with any of the prior releases