github.com/notaryproject/notation-go
Package notation provides signer and verifier for notation Sign and Verification. ExampleLocalSign demonstrates how to use signer.Sign to sign an artifact at local (without using a registry.Repository). ExampleLocalVerify demonstrates how to use verifier.Verify to verify a signature of the target artifact at local (without using a registry.Repository). ExampleRemoteSign demonstrates how to use notation.Sign to sign an artifact in the remote registry and push the signature to the remote. ExampleRemoteVerify demonstrates how to use notation.Verify to verify signatures of an artifact in the remote registry. Example_signWithTimestamp demonstrates how to use notation.Sign to sign an artifact with a RFC 3161 compliant timestamp countersignature and user trusted TSA root certificate Example_verifyWithTimestamp demonstrates how to use notation.Verify to verify signature of an artifact including RFC 3161 compliant timestamp countersignature
Security Advisories for github.com/notaryproject/notation-go in go