GH-ATTESTATION-TRUSTED-ROOT(1) GitHub CLI manual GH-ATTESTATION-TRUSTED-ROOT(1) NAME gh-attestation-trusted-root - Output trusted_root.jsonl contents, likely for offline verification SYNOPSIS gh attestation trusted-root [--tuf-url <url> --tuf-root <file-path>] [--verify-only] [flags] DESCRIPTION Output contents for a trusted_root.jsonl file, likely for offline verifica- tion. When using gh attestation verify, if your machine is on the internet, this will happen automatically. But to do offline verification, you need to sup- ply a trusted root file with --custom-trusted-root; this command will help you fetch a trusted_root.jsonl file for that purpose. You can call this command without any flags to get a trusted root file cov- ering the Sigstore Public Good Instance as well as GitHub's Sigstore in- stance. Otherwise you can use --tuf-url to specify the URL of a custom TUF reposi- tory mirror, and --tuf-root should be the path to the root.json file that you securely obtained out-of-band. If you just want to verify the integrity of your local TUF repository, and don't want the contents of a trusted_root.jsonl file, use --verify-only. OPTIONS --hostname <string> Configure host to use --tuf-root <string> Path to the TUF root.json file on disk --tuf-url <string> URL to the TUF repository mirror --verify-only Don't output trusted_root.jsonl contents EXIT CODES 0: Successful execution 1: Error 2: Command canceled 4: Authentication required NOTE: Specific commands may have additional exit codes. Refer to the com- mand's help for more information. EXAMPLE # Get a trusted_root.jsonl for both Sigstore Public Good and GitHub's instance $ gh attestation trusted-root SEE ALSO gh-attestation(1) Aug 2026 GH-ATTESTATION-TRUSTED-ROOT(1)
NAME | SYNOPSIS | DESCRIPTION | OPTIONS | EXIT CODES | EXAMPLE | SEE ALSO
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=gh-attestation-trusted-root&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>