CmdID

CmdID / Commands

in-toto-run

Generate link metadata while carrying out a supply chain step. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Tag a Git repo and signing the resulting link file

in-toto-run --step-name tag --products . --signing-key key_file -- git tag v1.0Identify

Create a tarball, storing files as materials and the tarball as product

in-toto-run --step-name package --materials project --products project.tar.gz -- tar czf project.tar.gz projectIdentify

Generate signed attestations for review work

in-toto-run --step-name review --signing-key key_file --materials document.pdf --no-commandIdentify

Scan the image using Trivy and generate link file

in-toto-run --step-name scan --signing-key key_file --products report.json -- /bin/sh -c "trivy --output report.json --format json path/to/image"Identify