notaryproject / notaryproject.dev

Notary Project Website

Home Page:https://notaryproject.dev

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Document security best practices for Notation deployment

toddysm opened this issue · comments

As part of the release of Notation 1.0.0 we need to document the security best practices to use Notation in various scenarios. One important part is to document how to protect the locations on the file system where the policies, plugins, trust store, etc. are located and what are the associated risks of unauthorized access to those locations.