/usr/share/ggshield/bin/sigstore

usage: sigstore [-h] [-v] [-V] [--staging | --instance URL | --trust-config FILE] COMMAND ...

a tool for signing and verifying Python package distributions

positional arguments:
  COMMAND               the operation to perform
    attest              sign one or more inputs using DSSE
    sign                sign one or more inputs
    verify              verify one or more inputs
    get-identity-token  retrieve and return a Sigstore-compatible OpenID Connect token
    trust-instance      Initialize trust for a Sigstore instance
    plumbing            developer-only plumbing operations

options:
  -h, --help            show this help message and exit
  -v, --verbose         run with additional debug logging; supply multiple times to increase
                        verbosity (default: 0)
  -V, --version         show program's version number and exit
  --staging             Use sigstore's staging instance, instead of the default production
                        instance. Mutually exclusive with other instance configuration arguments.
                        (default: False)
  --instance URL        Use a given Sigstore instance URL, instead of the default production
                        instance. Mutually exclusive with other instance configuration arguments.
                        (default: None)
  --trust-config FILE   Use given client trust configuration instead of using the default
                        production instance. Mutually exclusive with other instance configuration
                        arguments. (default: None)