notation

Apr 18, 2025

Changes in this version

+ type NoApplicableTrustPolicyError struct

+ Msg string

+ func (e NoApplicableTrustPolicyError) Error() string

+ type PushSignatureFailedError struct

+ Msg string

+ func (e PushSignatureFailedError) Error() string

+ type SignatureRetrievalFailedError struct

+ Msg string

+ func (e SignatureRetrievalFailedError) Error() string

+ type UserMetadataVerificationFailedError struct

+ Msg string

+ func (e UserMetadataVerificationFailedError) Error() string

+ type VerificationFailedError struct

+ Msg string

+ func (e VerificationFailedError) Error() string

+ type VerificationInconclusiveError struct

+ Msg string

+ func (e VerificationInconclusiveError) Error() string

Jan 15, 2025

Changes in this version

type SignerSignOptions

+ TSARevocationValidator revocation.Validator

Sep 27, 2024 GO-2025-3381 +1 more

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

  GO-2025-3382: notation-go has an OS error when setting CRL cache leads to denial of signature verification in github.com/notaryproject/notation-go

Sep 5, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Aug 28, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Changes in this version

type SignerSignOptions

+ TSARootCAs *x509.CertPool

+ Timestamper tspclient.Timestamper

Aug 16, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Jul 23, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Jul 25, 2023

Changes in this version

+ func Sign(ctx context.Context, signer Signer, repo registry.Repository, ...) (ocispec.Descriptor, error)

+ type ErrorNoApplicableTrustPolicy struct

+ Msg string

+ func (e ErrorNoApplicableTrustPolicy) Error() string

+ type ErrorPushSignatureFailed struct

+ Msg string

+ func (e ErrorPushSignatureFailed) Error() string

+ type ErrorSignatureRetrievalFailed struct

+ Msg string

+ func (e ErrorSignatureRetrievalFailed) Error() string

+ type ErrorUserMetadataVerificationFailed struct

+ Msg string

+ func (e ErrorUserMetadataVerificationFailed) Error() string

+ type ErrorVerificationFailed struct

+ Msg string

+ func (e ErrorVerificationFailed) Error() string

+ type ErrorVerificationInconclusive struct

+ Msg string

+ func (e ErrorVerificationInconclusive) Error() string

+ type SignOptions struct

+ ArtifactReference string

+ UserMetadata map[string]string

+ type Signer interface

+ Sign func(ctx context.Context, desc ocispec.Descriptor, opts SignerSignOptions) ([]byte, *signature.SignerInfo, error)

+ type SignerSignOptions struct

+ ExpiryDuration time.Duration

+ PluginConfig map[string]string

+ SignatureMediaType string

+ SigningAgent string

+ type ValidationResult struct

+ Action trustpolicy.ValidationAction

+ Error error

+ Type trustpolicy.ValidationType

+ type VerificationOutcome struct

+ EnvelopeContent *signature.EnvelopeContent

+ Error error

+ RawSignature []byte

+ VerificationLevel *trustpolicy.VerificationLevel

+ VerificationResults []*ValidationResult

+ func Verify(ctx context.Context, verifier Verifier, repo registry.Repository, ...) (ocispec.Descriptor, []*VerificationOutcome, error)

+ func (outcome *VerificationOutcome) UserMetadata() (map[string]string, error)

+ type Verifier interface

+ Verify func(ctx context.Context, desc ocispec.Descriptor, signature []byte, ...) (*VerificationOutcome, error)

+ type VerifierVerifyOptions struct

+ ArtifactReference string

+ PluginConfig map[string]string

+ SignatureMediaType string

+ UserMetadata map[string]string

+ type VerifyOptions struct

+ ArtifactReference string

+ MaxSignatureAttempts int

+ PluginConfig map[string]string

+ UserMetadata map[string]string

May 16, 2023 GO-2023-1832

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Apr 22, 2023 GO-2023-1832

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Feb 16, 2023 GO-2023-1832

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Feb 16, 2023 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Dec 7, 2022 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Nov 2, 2022 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Oct 11, 2022 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Aug 17, 2022 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

May 26, 2022 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Apr 22, 2022 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go