A tool to sign and verify artifacts
Publisher’s description
What is Notation CLI?
Notation CLI by Notary Project is open-source Windows software in the containers & devops category. It is written in Go.
Installation and requirements
The publisher provides Portable installers for 64-bit Windows. It runs without installation (portable).
Updates and version history
The current version is 1.3.2, released on April 27, 2025. The version history goes back to August 15, 2023: 8 releases, all linked to the official files. That is about 4.7 releases a year. The last update is more than a year old.
Popularity and file types
The source code on GitHub (notaryproject/notation) has 502 stars. Similar programs include Helm, Kubernetes - Minikube - A Local Kubernetes Development Environment and Docker Desktop.
Project description on GitHub: “A CLI tool to sign and verify artifacts”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
Cons
- No native ARM64 build
- No update for more than a year
In short: Notation CLI is an open-source containers & devop tool for 64-bit PCs. It is actively maintained.
Is Notation CLI safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
014F25A530EEE17520C8E1EB7380E4BD02FF6FC04479A07A890954E3B7DDFDC7· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the notaryproject/notation repository on GitHub by the Open Source Security Foundation, last run on October 24, 2026.
- Dependency update tool10
- No binaries in the repository10
- Restricted token permissions10
- No dangerous workflows10
- Pinned dependencies10
- Security policy10
- Licence declared10
- Contributors from several organisations10
- Code review9
- Branch protection8
- Static code analysis7
- OpenSSF Best Practices badge2
- Tests in CI2
- Actively maintained1
- Signed releases0
- No known vulnerabilities0
- Fuzzing0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 8 versions ›8 versions over 2 years · about 4.7 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 1.3.2Latest | April 27, 2025 | — | 64-bit ZIP |
| 1.3.1 | February 24, 2025 | — | 64-bit ZIP |
| 1.3.0 | January 22, 2025 | — | 64-bit ZIP |
| 1.2.0 | August 30, 2024 | — | 64-bit ZIP |
| 1.1.1 | June 13, 2024 | — | 64-bit ZIP |
| 1.1.0 | January 29, 2024 | — | 64-bit ZIP |
| 1.0.1 | November 9, 2023 | — | 64-bit ZIP |
| 1.0.0 | August 15, 2023 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id NotaryProject.Notation -eProgram files (.exe): notation.exe
Related guide: How to use winget: install and update apps
Information
- Publisher
- Notary Project
- Category
- Containers & DevOps
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/notaryproject/notation
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 1.3.2
- Released
- April 27, 2025
- Added to the catalogue
- August 22, 2023
- Versions listed
- 8
- Updates / year
- 4.7
- GitHub stars
- 502
- GitHub forks
- 104
- Website
- notaryproject.dev
- winget ID
- NotaryProject.Notation
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to Notation CLI
See all ›-
Open source1.6M ↓ -
Kubernetes - Minikube - A Local Kubernetes Development Environment1.39.0minikube quickly sets up a local Kubernetes cluster on macOS, Linux, and Windows. We proudly focus on helping application developers and new Kubernetes users.Open source747.8K ↓ -
Docker Desktop4.96.3An application for macOS and Windows machines for the building and sharing of containerised applications.Proprietary2.2M ↓ -
Open source395.6K ↓ -
Serverless Framework3.39.0Build applications on AWS Lambda and other next-gen cloud services, that auto-scale and only charge you when they run.Open source84.9K ↓ -
Open source2.3M ↓ -
Open source299.3K ↓ -
HashiCorp Consul2.0.4A distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.Proprietary205.5K ↓
Frequently asked questions
Is Notation CLI free?
Yes. Notation CLI is open-source software under the Apache-2.0 licence.
Is Notation CLI safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install Notation CLI with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does Notation CLI run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of Notation CLI?
The versions page lists all 8 versions with links to their official installer files, back to August 15, 2023.
Can I use Notation CLI without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to Notation CLI?
Helm, Kubernetes - Minikube - A Local Kubernetes Development Environment, Docker Desktop, Pulumi and Serverless Framework. The alternatives page compares them.
