doc: add cicd and gitops solutions (#419)

This PR adds CI/CD and GitOps solutions for notation. It helps users to easily find related doc links and references. Preview: https://deploy-preview-419--notarydev.netlify.app/docs/user-guides/tutorials/cicd/ --------- Signed-off-by: Feynman Zhou <[email protected]> Co-authored-by: Yi Zha <[email protected]>
notaryproject · Dec 7, 2024 · 48ce278 · 48ce278
1 parent ac5aba0
commit 48ce278
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/content/en/docs/user-guides/tutorials/cicd.md b/content/en/docs/user-guides/tutorials/cicd.md
@@ -0,0 +1,17 @@
+---
+title: "Sign and verify artifacts in CI/CD and GitOps"
+description: "How to sign and verify artifacts in CI/CD and GitOps with Notation"
+type: docs
+weight: 2
+---
+
+## CI/CD
+
+Notary Project provides solutions to help users sign and verify artifacts in CI/CD pipelines with Notation GitHub Actions and Azure DevOps. Follow the guidance below to get started Notation in CI/CD.
+
+- [Notation GitHub Actions](https://github.com/marketplace/actions/notation-actions)
+- [Sign and verify a container image with Notation in Azure DevOps Pipelines](https://learn.microsoft.com/en-us/azure/security/container-secure-supply-chain/articles/notation-ado-task-sign)
+
+## GitOps
+
+In addition, Notary Project collaborates with the Flux community to enable signature verification in GitOps. The Flux source-controller supports verifying the authenticity of OCI artifacts signed with Notation. See [Signatures verification with Notation in Flux](https://fluxcd.io/blog/2024/05/flux-v2.3.0/) for details.