notation inspect

notation inspect

Inspect all signatures associated with the signed artifact

Synopsis

Inspect all signatures associated with the signed artifact

notation inspect [reference] [flags]

Examples

# Inspect signatures on an OCI artifact identified by a digest:
notation inspect <registry>/<repository>@<digest>

# Inspect signatures on an OCI artifact identified by a tag  (Notation will resolve tag to digest):
notation inspect <registry>/<repository>:<tag>

# Inspect signatures on an OCI artifact identified by a digest and output as json:
notation inspect --output json <registry>/<repository>@<digest>

# [Experimental] Inspect signatures on an OCI artifact identified by a digest using the Referrers API, if not supported (returns 404), fallback to the Referrers tag schema
notation inspect --allow-referrers-api <registry>/<repository>@<digest>

Options

      --allow-referrers-api   [Experimental] use the Referrers API to inspect signatures, if not supported (returns 404), fallback to the Referrers tag schema
  -d, --debug                debug mode
  -h, --help                 help for inspect
      --insecure-registry    use HTTP protocol while connecting to registries. Should be used only for testing
      --max-signatures int   maximum number of signatures to evaluate or examine (default 100)
  -o, --output string        output format, options: 'json', 'text' (default "text")
  -p, --password string      password for registry operations (default to $NOTATION_PASSWORD if not specified)
  -u, --username string      username for registry operations (default to $NOTATION_USERNAME if not specified)
  -v, --verbose              verbose mode

SEE ALSO

  • notation - Notation - a tool to sign and verify artifacts
Auto generated by spf13/cobra on 19-Sep-2023