Add Notary and ORAS project ideas to lfx-mentorship (#796)

* Add Notary and ORAS project ideas to lfx-mentorship

Signed-off-by: Feynman Zhou <feynmanzhou@microsoft.com>

* doc: Add Notary and ORAS project ideas to lfx-mentorship

Signed-off-by: Feynman Zhou <feynmanzhou@microsoft.com>

---------

Signed-off-by: Feynman Zhou <feynmanzhou@microsoft.com>

lfx-mentorship/2023/01-Mar-May/project_ideas.md

@@ -481,4 +481,33 @@ Note: This item is a work in progress. The selected mentee is expected to contin
 
 - Upstream Issue: https://github.com/nats-io/dot-net-nats-examples/issues/1
 
+
+### Notary
+
+#### HashiCorp Vault plugin for Notary
+
+- Description: Notary is a CNCF incubating project that aims to provide signing and verification capabilities to ensure delivery integrity and security. It supports creating and storing signatures for container images, SBOM, vulnerability scanning results, etc. to ensure the artifacts someone produced have not been tampered by others. Notary only has an Azure Key Vault plugin for storing keys in Azure Key Vault, which is used to sign and verify artifacts in the OCI registry. [HashiCorp Vault](https://github.com/hashicorp/vault) is a popular KMS and we see more and more users rely on it in the on-premise environment.
+- Expected Outcome: Develop a Key Management System (KMS) plugin with [HashiCorp Vault](https://github.com/hashicorp/vault) for Notary CLI (Notation), which can be used to store the keys for Notation signing and verification.
+- Recommended Skills: Golang programming language, Notary knowledge.
+- Mentor(s): Patrick Zheng (@patrickzheng200, patrickzheng@microsoft.com), Shiwei Zhang (@shizhMSFT, shiwei.zhang@microsoft.com)
+- Upstream Issue: https://github.com/notaryproject/notation/issues/521
+
+### ORAS
+
+#### Develop .NET SDK for ORAS
+
+- Description: [ORAS](https://oras.land/) is a tool for working with OCI artifacts and OCI registries. It allows users to distribute OCI artifacts across OCI Registries. Users seeking a generic registry client can benefit from the ORAS CLI, while developers can build their own clients on top of one of the ORAS client libraries. ORAS has Python and Golang SDK that allow developers to build their own clients on top of one of the library. Similarly, developing a .NET SDK will enable .Net developers to use ORAS API and enhance the ORAS ecosystem. 
+- Expected Outcome: Develop a .NET SDK in a new repository and write the examples and API document on GoDoc. Write unit test for this SDK and make sure the testing coverage is qualified.
+- Recommended Skills: C#/.NET, ORAS conceptual knowledge.
+- Mentor(s): Sylvia Lei (@Wwwsylvia, lixia.lei@microsoft.com), Shiwei Zhang (@shizhMSFT, shiwei.zhang@microsoft.com)
+- Upstream Issue: https://github.com/oras-project/oras/issues/774
+
+#### Develop ORAS Website
+
+- Description: [ORAS](https://oras.land/) is a tool for working with OCI artifacts and OCI registries. It allows users to distribute OCI artifacts across OCI Registries. ORAS only has a documentation site so far, the project goal is to develop a new website using Hugo framework based on the Figma layout design.
+- Expected Outcome: Develop a new website using the [Hugo framework](https://gohugo.io/) based on the Figma layout design. It will replace the existing [ORAS documentation website](https://oras.land/) and provide a better user experience with interactive design.
+- Recommended Skills: HTML, Javascript, CSS, Hugo.
+- Mentor(s): Feynman Zhou (@FeynmanZhou, feynmanzhou@microsoft.com), 
+- Upstream Issue: https://github.com/oras-project/oras-www/issues/82
+
 ---