Skip to content

new(notaryproject/notation): OCI artifact signing CLI (CNCF graduated)#13087

Open
tannevaled wants to merge 1 commit into
pkgxdev:mainfrom
tannevaled:new/notation
Open

new(notaryproject/notation): OCI artifact signing CLI (CNCF graduated)#13087
tannevaled wants to merge 1 commit into
pkgxdev:mainfrom
tannevaled:new/notation

Conversation

@tannevaled
Copy link
Copy Markdown
Contributor

Summary

  • Adds a new pantry recipe for notaryproject/notation at projects/github.com/notaryproject/notation/package.yml.
  • Notation is the CNCF-graduated CLI from the Notary Project (Notary v2) for signing and verifying OCI artifacts (container images, Helm charts, etc.).
  • Single Go binary built from ./cmd/notation. Version stamping wired through internal/version.Version / BuildMetadata per the upstream Makefile, with BuildMetadata cleared for tagged builds to match upstream's release-build behavior.
  • build.skip: fix-patchelf per the standard Go-CLI pattern for relocatable bottles.
  • Covers linux + darwin on x86-64 and aarch64.

Test plan

  • pkgx +github.com/notaryproject/notation@1.3.2 notation version on linux/x86-64
  • pkgx +github.com/notaryproject/notation@1.3.2 notation version on linux/aarch64
  • pkgx +github.com/notaryproject/notation@1.3.2 notation version on darwin/x86-64
  • pkgx +github.com/notaryproject/notation@1.3.2 notation version on darwin/aarch64

Co-Authored-By: Claude Opus 4.7 noreply@anthropic.com

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant