Docker Image signing with Notation
This article takes a detailed look at image signatures created by Notation, which is one of several tools to create and verify Docker images.
Month: February 2025
Docker Image signing and attestation – overview of the 5 best tools
This article provides an overview of available options to a) sign and verify Docker/container images and b) create image attestations. It compares the tools Docker Content Trust, BuildKit attestations, Notation, Cosign, and GitHub attestations. The basic terms and concepts are explained, and it concludes with recommendations for which tool is most suitable per use case.