Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
glab(1)								       glab(1)

NAME
       glab-attestation-verify	- Verify the provenance	of a specific artifact
       or file.	(EXPERIMENTAL)

SYNOPSIS
       glab attestation	verify	 [flags]

DESCRIPTION
       Verify the provenance of	an artifact built by a GitLab CI/CD  pipeline.
       This  command  checks the artifact's signed attestation against the ex-
       pected GitLab project and pipeline.

       This command requires the cosign	binary.	To install it, see Cosign  in-
       stallation    <https://docs.sigstore.dev/cosign/system_config/installa-
       tion/>.

       This command works only on GitLab.com.

       For more	information about attestations,	see:

        Attestations API <https://docs.gitlab.com/api/attestations/>

        SLSA	     provenance	       specification	    <https://docs.git-
	 lab.com/ci/pipeline_security/slsa/provenance_v1/>

        SLSA	software   attestations	  <https://slsa.dev/spec/v1.2/attesta-
	 tion-model>

       This feature is an experiment and is not	ready for production use.   It
       might  be  unstable  or removed at any time.  For more information, see
       https://docs.gitlab.com/policy/development_stages_support/.

OPTIONS	INHERITED FROM PARENT COMMANDS
       -h, --help[=false]      Show help for this command.

EXAMPLE
       # Verify	attestation for	filename.txt in	the gitlab-org/gitlab project
       glab attestation	verify gitlab-org/gitlab filename.txt

       # Verify	attestation for	filename.txt in	the project with ID 123
       glab attestation	verify 123 filename.txt

SEE ALSO
       glab-attestation(1)

Auto generated by spf13/cobra	   Jun 2026			       glab(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=glab-attestation-verify&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>

home | help