Skip to content

README.md

Latest commit

 

History

History
54 lines (36 loc) · 1.62 KB

README.md

File metadata and controls

54 lines (36 loc) · 1.62 KB

Auths Test Repo

Verified with Auths

This repository demonstrates Auths — decentralized commit signing and artifact verification.

What's here

  • Signed commits — Every commit is signed with an Auths cryptographic identity
  • Artifact attestation — hello.tar.gz is signed with hello.tar.gz.auths.json
  • CI verification — GitHub Action verifies signatures on every push

Verify locally

# Install Auths
brew install auths-dev/tap/auths

# Clone and verify
git clone https://github.com/auths-dev/auths-test-repo.git
cd auths-test-repo
auths verify HEAD

Initialize Auths for Repo

Sync the trusted signing keys from the Auths registry into this repo so that commit signatures can be verified locally and in CI.

auths signers sync --output .auths/allowed_signers

Verify the artifact

Check that hello.tar.gz hasn't been tampered with by validating its cryptographic attestation.

auths artifact verify hello.tar.gz

Inline verification widget

Add this to any HTML page:

<script type="module" src="https://unpkg.com/@auths-dev/verify@0.3.0/dist/auths-verify.mjs"></script>
<auths-verify repo="https://github.com/auths-dev/auths-test-repo"></auths-verify>

Learn more