Update cheatsheets

This commit is contained in:
ivuorinen
2025-12-23 00:21:40 +00:00
parent 716a67f83d
commit 4e6886aa1f
57 changed files with 368 additions and 131 deletions

View File

@@ -10,7 +10,7 @@ source: https://github.com/tldr-pages/tldr.git
- Download attestations for a local file associated with a specific repository:
`gh {{[at|attestation]}} download {{path/to/artifact.bin}} {{[-R|--repo]}} {{owner}}/{{repo}}`
`gh {{[at|attestation]}} download {{path/to/artifact.bin}} {{[-R|--repo]}} {{owner}}/{{repository}}`
- Download attestations for an OCI container image associated with an organization:
@@ -18,11 +18,11 @@ source: https://github.com/tldr-pages/tldr.git
- Verify a local artifact online against attestations from a specific repository:
`gh {{[at|attestation]}} verify {{path/to/artifact.bin}} {{[-R|--repo]}} {{owner}}/{{repo}}`
`gh {{[at|attestation]}} verify {{path/to/artifact.bin}} {{[-R|--repo]}} {{owner}}/{{repository}}`
- Verify an artifact, requiring it was signed by a specific reusable workflow for enhanced security:
`gh {{[at|attestation]}} verify {{path/to/artifact.bin}} {{[-o|--owner]}} {{organization_name}} --signer-workflow {{owner}}/{{repo}}/{{path/to/workflow.yml}}`
`gh {{[at|attestation]}} verify {{path/to/artifact.bin}} {{[-o|--owner]}} {{organization_name}} --signer-workflow {{owner}}/{{repository}}/{{path/to/workflow.yml}}`
- Verify an artifact and output the detailed verification results as JSON for use in policy engines: