Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help 
glab(1) 								 glab(1)

NAME
     glab-attestation-verify  -  Verify the provenance of a specific artifact or
     file. (EXPERIMENTAL)

SYNOPSIS
     glab attestation verify   [flags]

DESCRIPTION
     Verify the provenance of an artifact built  by  a	GitLab	CI/CD  pipeline.
     This  command checks the artifact's signed attestation against the expected
     GitLab project and pipeline.

     This command requires the cosign binary. To install it, see Cosign  instal-
     lation <https://docs.sigstore.dev/cosign/system_config/installation/>.

     This command works only on GitLab.com.

     For more information about attestations, see:

     * Attestations API <https://docs.gitlab.com/api/attestations/>

     * SLSA  provenance specification <https://docs.gitlab.com/ci/pipeline_secu-
       rity/slsa/provenance_v1/>

     * SLSA software attestations <https://slsa.dev/spec/v1.2/attestation-model>

     This feature is an experiment and is not  ready  for  production  use.   It
     might  be	unstable  or  removed  at  any	time.  For more information, see
     https://docs.gitlab.com/policy/development_stages_support/.

OPTIONS INHERITED FROM PARENT COMMANDS
     -h, --help[=false]      Show help for this command.

EXAMPLE
     # Verify attestation for filename.txt in the gitlab-org/gitlab project
     glab attestation verify gitlab-org/gitlab filename.txt

     # Verify attestation for filename.txt in the project with ID 123
     glab attestation verify 123 filename.txt

SEE ALSO
     glab-attestation(1)

Auto generated by spf13/cobra	    Aug 2026				 glab(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=glab-attestation-verify&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>

home | help