{"id":52142,"date":"2023-08-28T14:43:00","date_gmt":"2023-08-28T18:43:00","guid":{"rendered":"https:\/\/sdtimes.com\/?p=52142"},"modified":"2023-10-27T14:06:29","modified_gmt":"2023-10-27T18:06:29","slug":"cncfs-notary-and-notation-projects-get-major-update","status":"publish","type":"post","link":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/","title":{"rendered":"CNCF\u2019s Notary and Notation projects get major update"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">Notary, the CNCF project that provides cross-industry standards for supply chain security, has announced a major release.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This brings both the Notary Project and Notation Project to version 1.0.0. Notation is a sub-project that implements Notary specifications.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Included in this release are an OCI signature specification, OCI COSE signature envelope, OCI JWS signature envelope, OCI signing and verification workflow, signing scheme, Trust Store, and Trust policy, and plugin specification for Notation.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The team also revealed what it\u2019s working on next. These include the ability to sign and verify arbitrary blogs, integration with GitHub Actions, a HashiCorp Vault plugin, plugin lifecycle management, timestamping support, and the ability to manage trust policies using CLI commands.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u201cAs containers and cloud native artifacts become common deployment units, users want to make sure that they are authentic in their environments. The Notary Project is a set of specifications and tools intended to provide cross-industry standards for securing software supply chains through signing and verification, signature portability, and key\/certificate management,\u201d the project maintainers wrote in a <\/span><a href=\"https:\/\/www.cncf.io\/blog\/2023\/08\/28\/notary-project-announces-a-major-release\/\"><span style=\"font-weight: 400;\">blog post<\/span><\/a><span style=\"font-weight: 400;\">. <\/span><\/p>\n<!-- AddThis Advanced Settings generic via filter on the_content --><!-- AddThis Share Buttons generic via filter on the_content -->","protected":false},"excerpt":{"rendered":"<p>Notary, the CNCF project that provides cross-industry standards for supply chain security, has announced a major release.\u00a0 This brings both the Notary Project and Notation Project to version 1.0.0. Notation is a sub-project that implements Notary specifications.\u00a0 Included in this release are an OCI signature specification, OCI COSE signature envelope, OCI JWS signature envelope, OCI  &hellip; <a class=\"read-more\" href=\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\">continue reading<\/a><!-- AddThis Advanced Settings generic via filter on get_the_excerpt --><!-- AddThis Share Buttons generic via filter on get_the_excerpt --><\/p>\n","protected":false},"author":752,"featured_media":52143,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"cybocfi_hide_featured_image":"","footnotes":"","_links_to":"","_links_to_target":""},"categories":[1],"tags":[6460,12000,45,16101],"coauthors":[11687],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CNCF\u2019s Notary and Notation projects get major update - SD Times<\/title>\n<meta name=\"description\" content=\"Notary is a project that provides cross-industry standards for supply chain security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CNCF\u2019s Notary and Notation projects get major update - SD Times\" \/>\n<meta property=\"og:description\" content=\"Notary is a project that provides cross-industry standards for supply chain security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\" \/>\n<meta property=\"og:site_name\" content=\"SD Times\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SDTimesD2\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-28T18:43:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-27T18:06:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jenna Barron\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sdtimes\" \/>\n<meta name=\"twitter:site\" content=\"@sdtimes\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jenna Barron\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\"},\"author\":{\"name\":\"Jenna Barron\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/person\/f2524e55ae19da07ea3613577da9f786\"},\"headline\":\"CNCF\u2019s Notary and Notation projects get major update\",\"datePublished\":\"2023-08-28T18:43:00+00:00\",\"dateModified\":\"2023-10-27T18:06:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\"},\"wordCount\":182,\"publisher\":{\"@id\":\"https:\/\/sdtimes.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg\",\"keywords\":[\"CNCF\",\"notary\",\"security\",\"Supply Chain Security\"],\"articleSection\":[\"Latest News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\",\"url\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\",\"name\":\"CNCF\u2019s Notary and Notation projects get major update - SD Times\",\"isPartOf\":{\"@id\":\"https:\/\/sdtimes.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg\",\"datePublished\":\"2023-08-28T18:43:00+00:00\",\"dateModified\":\"2023-10-27T18:06:29+00:00\",\"description\":\"Notary is a project that provides cross-industry standards for supply chain security.\",\"breadcrumb\":{\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage\",\"url\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg\",\"contentUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg\",\"width\":1920,\"height\":1280},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/sdtimes.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CNCF\u2019s Notary and Notation projects get major update\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/sdtimes.com\/#website\",\"url\":\"https:\/\/sdtimes.com\/\",\"name\":\"SD Times\",\"description\":\"Software Development News\",\"publisher\":{\"@id\":\"https:\/\/sdtimes.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/sdtimes.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/sdtimes.com\/#organization\",\"name\":\"SD Times\",\"url\":\"https:\/\/sdtimes.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png\",\"contentUrl\":\"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png\",\"width\":225,\"height\":90,\"caption\":\"SD Times\"},\"image\":{\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/SDTimesD2\",\"https:\/\/x.com\/sdtimes\",\"https:\/\/www.linkedin.com\/company\/sdtimes\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/person\/f2524e55ae19da07ea3613577da9f786\",\"name\":\"Jenna Barron\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/sdtimes.com\/#\/schema\/person\/image\/b4be3423b187642936e62f121111345e\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b128943929626cdcafccbac86bd306f9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b128943929626cdcafccbac86bd306f9?s=96&d=mm&r=g\",\"caption\":\"Jenna Barron\"},\"description\":\"Jenna Barron is News Editor of SD Times.\",\"url\":\"https:\/\/sdtimes.com\/author\/jennifer-sargent\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CNCF\u2019s Notary and Notation projects get major update - SD Times","description":"Notary is a project that provides cross-industry standards for supply chain security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/","og_locale":"en_US","og_type":"article","og_title":"CNCF\u2019s Notary and Notation projects get major update - SD Times","og_description":"Notary is a project that provides cross-industry standards for supply chain security.","og_url":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/","og_site_name":"SD Times","article_publisher":"https:\/\/www.facebook.com\/SDTimesD2","article_published_time":"2023-08-28T18:43:00+00:00","article_modified_time":"2023-10-27T18:06:29+00:00","og_image":[{"width":1920,"height":1280,"url":"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg","type":"image\/jpeg"}],"author":"Jenna Barron","twitter_card":"summary_large_image","twitter_creator":"@sdtimes","twitter_site":"@sdtimes","twitter_misc":{"Written by":"Jenna Barron","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#article","isPartOf":{"@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/"},"author":{"name":"Jenna Barron","@id":"https:\/\/sdtimes.com\/#\/schema\/person\/f2524e55ae19da07ea3613577da9f786"},"headline":"CNCF\u2019s Notary and Notation projects get major update","datePublished":"2023-08-28T18:43:00+00:00","dateModified":"2023-10-27T18:06:29+00:00","mainEntityOfPage":{"@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/"},"wordCount":182,"publisher":{"@id":"https:\/\/sdtimes.com\/#organization"},"image":{"@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage"},"thumbnailUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg","keywords":["CNCF","notary","security","Supply Chain Security"],"articleSection":["Latest News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/","url":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/","name":"CNCF\u2019s Notary and Notation projects get major update - SD Times","isPartOf":{"@id":"https:\/\/sdtimes.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage"},"image":{"@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage"},"thumbnailUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg","datePublished":"2023-08-28T18:43:00+00:00","dateModified":"2023-10-27T18:06:29+00:00","description":"Notary is a project that provides cross-industry standards for supply chain security.","breadcrumb":{"@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#primaryimage","url":"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg","contentUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2023\/08\/pexels-travis-saylor-951408.jpg","width":1920,"height":1280},{"@type":"BreadcrumbList","@id":"https:\/\/sdtimes.com\/security\/cncfs-notary-and-notation-projects-get-major-update\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sdtimes.com\/"},{"@type":"ListItem","position":2,"name":"CNCF\u2019s Notary and Notation projects get major update"}]},{"@type":"WebSite","@id":"https:\/\/sdtimes.com\/#website","url":"https:\/\/sdtimes.com\/","name":"SD Times","description":"Software Development News","publisher":{"@id":"https:\/\/sdtimes.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sdtimes.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/sdtimes.com\/#organization","name":"SD Times","url":"https:\/\/sdtimes.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/","url":"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png","contentUrl":"https:\/\/sdtimes.com\/wp-content\/uploads\/2014\/05\/deafaultlogo.png","width":225,"height":90,"caption":"SD Times"},"image":{"@id":"https:\/\/sdtimes.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SDTimesD2","https:\/\/x.com\/sdtimes","https:\/\/www.linkedin.com\/company\/sdtimes\/"]},{"@type":"Person","@id":"https:\/\/sdtimes.com\/#\/schema\/person\/f2524e55ae19da07ea3613577da9f786","name":"Jenna Barron","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sdtimes.com\/#\/schema\/person\/image\/b4be3423b187642936e62f121111345e","url":"https:\/\/secure.gravatar.com\/avatar\/b128943929626cdcafccbac86bd306f9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b128943929626cdcafccbac86bd306f9?s=96&d=mm&r=g","caption":"Jenna Barron"},"description":"Jenna Barron is News Editor of SD Times.","url":"https:\/\/sdtimes.com\/author\/jennifer-sargent\/"}]}},"_links":{"self":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts\/52142"}],"collection":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/users\/752"}],"replies":[{"embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/comments?post=52142"}],"version-history":[{"count":1,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts\/52142\/revisions"}],"predecessor-version":[{"id":52144,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/posts\/52142\/revisions\/52144"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/media\/52143"}],"wp:attachment":[{"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/media?parent=52142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/categories?post=52142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/tags?post=52142"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/sdtimes.com\/wp-json\/wp\/v2\/coauthors?post=52142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}