Notary v2: Deep Dive and Open Issues
summary
Notary v2 attaches signatures and metadata to OCI images in registries so signatures move with the artifact; it uses the notation CLI for notation sign/verify and a binary plugin spec to call remote key stores (demoed with an Azure Key Vault plugin). The demo shows signing with hardware-backed keys, storing SBOMs and scan results alongside images, gating deploys via ratify + Gatekeeper, copying full artifact graphs with oras, and an imminent RC1 release.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:07Justin Cormack
- 1:02Goals in Azure V2
- 1:28Goals of N3v2
- 7:36What Is the Internet Based on
- 11:52Security Expectations
- 18:25Docker Push
related talks
37mNotary: State Of Development
30mNotary v2: Supply Chain Security for Containers
32mNotary v2: Redesigning the Secure Supply Chain for Containers
06mNotary Project: Securing Binary Artifacts with Fine-grained Control
29mNotary Project: The Key To Secure Software Supply Chain
36mRedesigning Notary in a Multi-registry World
35mNotary: State of the Container Supply Chain
31mSign, Attest, and Verify! A Practical Guide for Software Supply...