v0.10.0-alpha.3

New Features:

• Implement basic signature verification
• Implement Notation directory structure
• Add config package & optimize directory package
• Add support for trust store parsing

Bug Fixes

• Fix #104: optimizes directory package
• Fix #58: trust store test issue on Windows
• Fix #98: fix hash function name according to the plugin spec

Other Changes:

• Add unit tests
• Add CodeQL security scanning
• Refactor registry interface

Detail Commits

• Add support for trust store parsing by @rgnote in #44
• Add GetApplicableTrustPolicy function by @rgnote in #51
• Verify X509 trusted identities by @rgnote in #54
• Fix trust store tests issue on Windows by @rgnote in #58
• Add CodeQL Security Scanning by @Wwwsylvia in #56
• feat: move pkg/registry from notaryproject/notation by @binbin-li in #63
• Add SignatureVerificationLevel type by @rgnote in #55
• chore: move registry directory under root by @binbin-li in #64
• refactor: refactor registry interface by @binbin-li in #67
• Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 by @dependabot in #68
• Bump actions/cache from 3.0.2 to 3.0.4 by @dependabot in #53
• Run unit tests in Github workflow by @Wwwsylvia in #60
• add to project template by @dtzar in #66
• Verification helpers by @rgnote in #72
• Refactor to use notation-core-go's SignatureEnvelope by @priteshbandi in #77
• Add command shapes for verify-signature and get-plugin-metadata by @jondonas in #76
• Implementing Notation directory structure by @JeyJeyGao in #73
• feat: Use PackArtifact to push signature manifest by @binbin-li in #87
• Migrate to codecov.io by @junczhuMSFT in #92
• resolving remote signature envelope digest as blob instead of manifest by @patrickzheng200 in #89
• Add more badges to README.md by @shizhMSFT in #94
• feat: add config package & optimize dir package by @JeyJeyGao in #90
• Basic Signature Verification by @rgnote in #79
• Implement custom signature verification level by @rgnote in #84
• Use Notation's PathManager in verification workflow by @rgnote in #100
• hash name fix by @chloeyin in #98
• test: add registry unit test by @binbin-li in #96
• Updates based on signing scheme update in notation-go-core by @priteshbandi in #85
• fix: dir package optimize by @JeyJeyGao in #104
• Bump github.com/go-ldap/ldap/v3 from 3.4.3 to 3.4.4 by @dependabot in #97
• build: bump dependencies by @shizhMSFT in #112

New Contributors

• @Wwwsylvia made their first contribution in #56
• @binbin-li made their first contribution in #63
• @dtzar made their first contribution in #66
• @priteshbandi made their first contribution in #77
• @jondonas made their first contribution in #76
• @JeyJeyGao made their first contribution in #73
• @junczhuMSFT made their first contribution in #92
• @patrickzheng200 made their first contribution in #89

Full Changelog: v0.9.0-alpha.1...v0.10.0-alpha.3