This Notation plugin allows you to use Microsoft's Artifact Signing to sign and verify container images and other OCI artifacts. Signatures enable users to verify that these artifacts are from a particular source and have not been tampered with since their release.
Azure/artifact-signing-notation-plugin is a plugin for the Notation command-line tool that uses Microsoft's Artifact Signing service to sign and verify container images and other OCI artifacts. It is for users who need to check that artifacts come from a trusted source and were not changed after release. The catalogue includes an instruction for using the plugin.
Latest release v1.1.2 · 3 Nov 2026
1 file for GitHub Copilot: artifact-signing-notation-plugin copilot-instructions.md — 1,094 tokens loaded in every session.
.github/copilot-instructions.md A 1,094 tok These files are Azure/artifact-signing-notation-plugin's own configuration — they tell GitHub Copilot how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.