GH-RELEASE-VERIFY(1) GitHub CLI manual GH-RELEASE-VERIFY(1)

# [NAME](#NAME)

gh-release-verify - Verify the attestation for a release

# [SYNOPSIS](#SYNOPSIS)

**gh release verify \[<tag>] \[flags]**

# [DESCRIPTION](#DESCRIPTION)

Verify that a GitHub Release is accompanied by a valid cryptographically signed attestation.

An attestation is a claim made by GitHub regarding a release and its assets.

This command checks that the specified release (or the latest release, if no tag is given) has a valid attestation. It fetches the attestation for the release and prints metadata about all assets referenced in the attestation, including their digests.

# [OPTIONS](#OPTIONS)

[**--format** **<string>**](#format)

Output format: {json}

[**-q**, **--jq** **<expression>**](#q)

Filter JSON output using a jq expression

[**-t**, **--template** **<string>**](#t)

Format JSON output using a Go template; see "gh help formatting"

# [OPTIONS INHERITED FROM PARENT COMMANDS](#OPTIONS_INHERITED_FROM_PARENT_COMMANDS)

[**-R**, **--repo** **<\[HOST/\]OWNER/REPO>**](#R)

Select another repository using the \[HOST/]OWNER/REPO format

# [EXIT CODES](#EXIT_CODES)

0: Successful execution

1: Error

2: Command canceled

4: Authentication required

NOTE: Specific commands may have additional exit codes. Refer to the command's help for more information.

# [EXAMPLE](#EXAMPLE)

```
# Verify the latest release
gh release verify
# Verify a specific release by tag
gh release verify v1.2.3
# Verify a specific release by tag and output the attestation in JSON format
gh release verify v1.2.3 --format json
```

# [SEE ALSO](#SEE_ALSO)

[**gh-release(1)**](/man/os/gh/gh-release.1)

Oct 2026

---

Document: gh-release-verify(1) from gh 2.103.3-r0 (Chainguard OS)
Source: https://github.com/cli/cli