Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update: align Notation with OCI specs #663

Merged
merged 10 commits into from
May 16, 2023
Merged

Conversation

Two-Hearts
Copy link
Contributor

In this PR:

  1. Removed Notation's support of signing with OCI artifact manifest. (One can still consume signatures in this type.)
  2. Moved the Referrers API behind experimental as discussed in community meeting. This change takes effect on sign, list, inspect, and verify commands. When a user wants to try the Referrers API, they need to set both NOTATION_EXPERIMENTAL=1 AND --allow-referrers-api; if the Referrers API is not supported, fallback to the Referrers tag schema automatically. Otherwise, by default, Notation would use the Referrers tag schema in all commands deterministically.
    References:
    https://github.com/opencontainers/distribution-spec/blob/v1.1.0-rc1/spec.md#listing-referrers
    https://github.com/opencontainers/distribution-spec/blob/v1.1.0-rc1/spec.md#referrers-tag-schema

This PR has been tested and:
resolves #659
resolves #660

…erimental

Signed-off-by: patrick <zongjunzheng@hotmail.com>
Signed-off-by: patrick <zongjunzheng@hotmail.com>
Signed-off-by: patrick <zongjunzheng@hotmail.com>
Signed-off-by: patrick <zongjunzheng@hotmail.com>
Signed-off-by: patrick <zongjunzheng@hotmail.com>
@codecov-commenter
Copy link

codecov-commenter commented May 12, 2023

Codecov Report

Merging #663 (b8a3a10) into main (5516199) will increase coverage by 2.95%.
The diff coverage is 58.82%.

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.

@@            Coverage Diff             @@
##             main     #663      +/-   ##
==========================================
+ Coverage   33.33%   36.28%   +2.95%     
==========================================
  Files          32       32              
  Lines        2019     1973      -46     
==========================================
+ Hits          673      716      +43     
+ Misses       1324     1229      -95     
- Partials       22       28       +6     
Impacted Files Coverage Δ
cmd/notation/manifest.go 0.00% <ø> (ø)
cmd/notation/sign.go 45.38% <33.33%> (+2.31%) ⬆️
cmd/notation/list.go 29.87% <50.00%> (+0.92%) ⬆️
cmd/notation/registry.go 50.46% <66.66%> (+36.18%) ⬆️
cmd/notation/verify.go 34.32% <71.42%> (+2.02%) ⬆️
cmd/notation/inspect.go 17.07% <75.00%> (+2.71%) ⬆️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

cmd/notation/sign.go Outdated Show resolved Hide resolved
cmd/notation/inspect.go Outdated Show resolved Hide resolved
cmd/notation/list.go Outdated Show resolved Hide resolved
cmd/notation/registry.go Outdated Show resolved Hide resolved
cmd/notation/registry.go Outdated Show resolved Hide resolved
Signed-off-by: patrick <zongjunzheng@hotmail.com>
cmd/notation/verify.go Outdated Show resolved Hide resolved
specs/commandline/inspect.md Outdated Show resolved Hide resolved
cmd/notation/registry.go Outdated Show resolved Hide resolved
cmd/notation/inspect.go Outdated Show resolved Hide resolved
test/e2e/suite/trustpolicy/registry_scope.go Outdated Show resolved Hide resolved
test/e2e/suite/trustpolicy/trust_store.go Show resolved Hide resolved
Signed-off-by: patrick <zongjunzheng@hotmail.com>
Signed-off-by: patrick <zongjunzheng@hotmail.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
shizhMSFT
shizhMSFT previously approved these changes May 16, 2023
Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

cmd/notation/registry.go Outdated Show resolved Hide resolved
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@JeyJeyGao JeyJeyGao left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@vaninrao10 vaninrao10 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@priteshbandi priteshbandi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@priteshbandi priteshbandi merged commit 13aff50 into notaryproject:main May 16, 2023
4 checks passed
@Two-Hearts Two-Hearts deleted the rc5 branch May 17, 2023 01:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
7 participants