This Notation plugin allows you to use Microsoft's Artifact Signing to sign and verify container images and other OCI artifacts. Signatures enable users to verify that these artifacts are from a particular source and have not been tampered with since their release. - View it on GitHub