The safeguards map / 3.7 Admission and owner settings

Notary Project (Notation)

Cloud Native Computing Foundation (foundation). CNCF, incubating. Apache-2.0. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Specifications and the Notation command-line tool for signing software artifacts and checking those signatures against a trust policy.

Where it sits

3.7 Admission and owner settings (primary): Signs artifacts and validates their signatures against a trust policy the owner sets, so a system can decide which validated artifacts it allows to be used.

Signing and validating software artifacts, ensure they have not been tampered with

captured

Able to custom trust policy and determine if a signed artifact is considered authentic

captured

Facts

Concern
security
Names the law
no
Subject
software
Used by
those who make itthose who distribute itthose who run it
Runs
by handin CI
Policy comes from
owner-entered settings

Handoffs

produces Provenance and signatures: COSE and JWS signatures

consumes Provenance and signatures: COSE and JWS signatures

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.