Notary Project: Securing Binary Artifacts with Fine-grained Control

on YouTube ↗06m

" summary

Notary Project demonstrates a concrete toolchain for signing non-OCI binaries: Notation implements OCI 1.1, supports JWS and COSE signature formats, and adds fine‑grained trust policies. Commands shown include notation blob sign, notation blob inspect, notation blob policy and notation blob verify to produce, publish and validate signatures alongside artifacts. The demo claims interoperable signing for web and package manager binaries and a plugin model to enforce policy-based verification before deployment.

AI-written summary · about

" related talks

• 40mNotary v2: Deep Dive and Open IssuesJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon Europe 2022
• 37mNotary: State Of DevelopmentJustin Cormack · KubeCon + CloudNativeCon North America 2022
• 30mNotary v2: Supply Chain Security for ContainersJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon Europe 2021
• 32mNotary v2: Redesigning the Secure Supply Chain for ContainersJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon North America 2020 Virtual
• 35mNotary: State of the Container Supply ChainJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon North America 2021
• 31mSign, Attest, and Verify! A Practical Guide for Software Supply...Vishal Choudhary, Anushka Mittal · KubeDay India 2023
• 36mRedesigning Notary in a Multi-registry WorldJustin Cormack · KubeCon + CloudNativeCon North America 2019
• 39mKicking Security Chain Attacks to the Curb with Kyverno and Notary...Feynman Zhou, Shuting Zhao · KubeCon + CloudNativeCon + Open Source Summit China 2023