Notation v1.0.0-rc.2 status check-in

[yizha1]

Notation release v1.0.0-rc.2, target date Feb 6, 2023

PR Status:

• [Feature] Metadata for signatures -- reviewed +2, but need to fix DCO and build failures before merge
  • feat: add support for signed user metadata notation-go#242
  • feat: add support for signed user metadata in notation sign and verify cmds notation#507
• [Feature] Semantic versioning -- done
  • feat: plugin version comparison functionality notation-go#237
• [Feature] CLI flag to force legacy manifest -- pending on decision on flag name
  • feat: support OCI image manifest notation-go#241
  • Update: added ErrorPushSignatureFailed notation-go#271 (review first)
  • feat: support OCI image manifest notation#509
• [Feature] Notation inspect -- reviewing, risky
  • spec: doc: notation Inspect Command line Spec notation#500
  • Adds a string conversion for algorithms and some formatting notation-core-go#111
  • feat: add a method for parsing the descriptor from a payload notation-go#261
  • feat: add implementation for notation inspect notation#528
• [Feature] Add debug logs for all CLI commands -- done
  • update: added log to notation login and logout commands notation#484
  • update: added log to notation key and certificate commands notation#478
• [spec] CLI to manage trust policy -- reviewing, risky
  • doc: CLI spec for trust policy management (DO NOT REVIEW) notation#505
• E2E testing - phase 1 -- done
  • test: e2e quickstart test case notation#494
  • test: e2e sign/verify/trustpolicy test cases notation#496
  • test: e2e plugin test cases notation#510
• Others
  • feat!: add signingkeys.json validation check notation-go#246
  • Use new methods introduced in keys.go notation#529
  • fix: Appends annotations returned by plugin to signature manifest's annotations notation-go#262
  • test: add unit test for ioutil package notation#534
  • test: add unit test for version & trace packages notation#526
  • bump: go 1.19 to 1.20 notation#538, reviewed +1 org
  • chore(license): add copyright notation#536
  • chore(license): add copyright notation-go#267
  • chore(license): add copyright notation-core-go#116
  • feat: added SignatureMediaTypes to RemoteVerifyOptions notation-go#218, reviewing
  • feat: add support for json output for notation verify notation#527

Note:

• E2E test cases should be added for new features accordingly. Need to plan it for feature sematic versioning, metadata service and notation inspect.