Skip to content

Commit c27df7a

Browse files
committed
add SLSA verification example
1 parent 9a5564d commit c27df7a

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

index.md

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,20 @@ that the release was generated from the intended repository.
6161

6262
To verify the provenance of the release, please follow the instructions [here](https://github.com/slsa-framework/slsa-github-generator#verify-provenance).
6363

64+
Example:
65+
```
66+
$ curl -sO https://github.com/c-ares/c-ares/releases/download/v1.34.3/c-ares-1.34.3.intoto.jsonl
67+
$ curl -sO https://github.com/c-ares/c-ares/releases/download/v1.34.3/c-ares-1.34.3.tar.gz
68+
$ slsa-verifier verify-artifact c-ares-1.34.3.tar.gz \
69+
--provenance-path c-ares-1.34.3.intoto.jsonl \
70+
--source-uri github.com/c-ares/c-ares \
71+
--source-tag v1.34.3
72+
Verified signature against tlog entry index 147812470 at URL: https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677a9bfd5bc5181d05ada688a805f9a59cfd082dec27cb6d6567f85b7382eea39dc5
73+
Verified build using builder "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@refs/tags/v2.0.0" at commit c29e75d54c3743783d51a609980495cf553b4bca
74+
Verifying artifact c-ares-1.34.3.tar.gz: PASSED
75+
76+
PASSED: SLSA verification passed
77+
```
6478

6579
## Features
6680

0 commit comments

Comments
 (0)