/usr/bin/slsa-verifier

Verify SLSA provenance for Github Actions.
For more information on SLSA, visit https://slsa.dev

Usage:
  slsa-verifier [flags]
  slsa-verifier [command]

Available Commands:
  completion                Generate the autocompletion script for the specified shell
  help                      Help about any command
  verify-artifact           Verifies SLSA provenance on artifact blobs given as arguments (assuming same provenance)
  verify-github-attestation Verifies SLSA provenance for a GitHub artifact attestation
  verify-image              Verifies SLSA provenance on a container image
  verify-npm-package        Verifies SLSA provenance for an npm package tarball [experimental]
  verify-vsa                Verifies SLSA VSAs for the given subject-digests
  version                   Prints the version

Flags:
  -h, --help   help for slsa-verifier

Use "slsa-verifier [command] --help" for more information about a command.