search

notaryproject / notation-go

A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.
Apache License 2.0
39 stars 42 forks source link

Support push and pull signature #71

Open FeynmanZhou opened 2 years ago

FeynmanZhou commented 2 years ago

As Notation verification workflow defined, Notation will support push and pull signature through the SDK capability of ORAS-go. It means notation-go has dependencies on the ORAS-go library.

Currently, we are working on these two dependencies in ORAS-go https://github.com/oras-project/oras-go/issues/175 and https://github.com/oras-project/oras-go/issues/205 to support push and pull signature artifact manifest with Notation.

shizhMSFT commented 2 years ago

oras-go rc.1 is released. We can start work this issue.

dtzar commented 2 years ago

This I believe we're deciding is not set until RC-2 per the linked user stories which we discussed on the last community call: https://github.com/notaryproject/notation/issues/245 https://github.com/notaryproject/notation/issues/246

yizha1 commented 3 weeks ago

As discussed in the community meeting on Nov 4, 2024, move this issue to future milestone.