notaryproject / notation-go

A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Match implementation with signature specification

priteshbandi opened this issue · comments

Modify signature implementation to match signature spec

  • Remove signedAttributes and use annotations for signed attributes.
  • update payload key names.
  • Add/update support for version in Artifact manifest and in JWS signature envelope.

Once this has been merged. We need to update the notation CLI reference.

The third one

Add/update support for version in Artifact manifest and in JWS signature envelope.

needs more discussion and should be in the alpha-2 milestone.

Related issues: