Notation
6.1#13 in code signing softwareFree planFree planLinuxmacOSWindows
VisitNotation vs SignPath
What both publish
| Fact | Notation | SignPath |
|---|---|---|
| Integrations | The project README links to signing workflows using Azure Key Vault and AWS Signer. | The company lists plugins and REST API integrations for GitHub Actions, GitLab, Jenkins, Azure DevOps, and TeamCity. |
| Purpose | Notation is a command-line tool for signing and verifying artifacts in OCI registries. | SignPath provides code signing and software integrity tools that enforce policies across software builds and releases. |
Notation plans
- Notary Project NotationFree
SignPath plans
- Open Source Code SigningFree
- Code GovernancePriced on request
- Software Integrity PlatformPriced on request
Pick Notation if…
Notation suits developers and CI/CD teams that need to sign and verify OCI artifacts, including container images and SBOMs. It may fit workflows that use existing key-management systems and need signatures to move across registries.
Pick SignPath if…
SignPath suits development teams that need controls around signing and verifying software releases. Its free option is for qualifying open source projects; deployment choices also include self-hosted and hybrid.