notaryproject/notary

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

3286 stars · 519 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Notary is a Go implementation of The Update Framework (TUF), providing a client and server for signing and verifying trusted collections of data. It is best known as the engine behind Docker Content Trust, enabling publishers to sign content offline and consumers to verify integrity even against compromised servers or mirrors.

Use cases

• sign and verify container images with docker content trust
• implement tuf-based software update security
• protect software distribution against server compromise
• manage signing keys with role-based key hierarchy
• verify integrity of published content from untrusted mirrors

When to choose

• you need TUF-compliant signing and verification of software artifacts
• you use Docker Content Trust and need a notary server or client
• you want survivable key compromise and role-separated signing keys

When to avoid

• you need the newer Notation/Notary v2 OCI signature ecosystem instead
• you only need simple checksum-based verification without key management
• you need a general-purpose artifact registry rather than a trust server

Facets

application · maturity maintenance

security cryptography cli http-server security developer-tools windows go self-hosted tuf content-trust code-signing supply-chain-security docker-content-trust cncf containers linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="notaryproject/notary")