GH-ATTESTATION(1) GitHub CLI manual GH-ATTESTATION(1)

# [NAME](#NAME)

gh-attestation - Work with artifact attestations

# [SYNOPSIS](#SYNOPSIS)

**gh attestation \[subcommand] \[flags]**

# [DESCRIPTION](#DESCRIPTION)

Download and verify artifact attestations.

# [AVAILABLE COMMANDS](#AVAILABLE_COMMANDS)

[**gh-attestation-download(1)**](#gh_attestation_download%281%29)

Download an artifact's attestations for offline use

[**gh-attestation-trusted-root(1)**](#gh_attestation_trusted_root%281%29)

Output trusted\_root.jsonl contents, likely for offline verification

[**gh-attestation-verify(1)**](#gh_attestation_verify%281%29)

Verify an artifact's integrity using attestations

# [ALIASES](#ALIASES)

gh at

# [EXIT CODES](#EXIT_CODES)

0: Successful execution

1: Error

2: Command canceled

4: Authentication required

NOTE: Specific commands may have additional exit codes. Refer to the command's help for more information.

# [SEE ALSO](#SEE_ALSO)

[**gh(1)**](/man/os/gh/gh.1)

Oct 2026

---

Document: gh-attestation(1) from gh 2.103.0-r0 (Chainguard OS)
Source: https://github.com/cli/cli