GH-RELEASE-VERIFY-ASSET(1) GitHub CLI manual GH-RELEASE-VERIFY-ASSET(1)

# [NAME](#NAME)

gh-release-verify-asset - Verify that a given asset originated from a release

# [SYNOPSIS](#SYNOPSIS)

**gh release verify-asset \[&lt;tag&gt;] &lt;file-path&gt; \[flags]**

# [DESCRIPTION](#DESCRIPTION)

Verify that a given asset file originated from a specific GitHub Release using cryptographically signed attestations.

An attestation is a claim made by GitHub regarding a release and its assets.

```
	This command checks that the asset you provide matches a valid attestation for the specified release (or the latest release, if no tag is given).
```

It ensures the asset's integrity by validating that the asset's digest matches the subject in the attestation and that the attestation is associated with the release.

# [OPTIONS](#OPTIONS)

[**--format** **&lt;string&gt;**](#format)

Output format: {json}

[**-q**, **--jq** **&lt;expression&gt;**](#q)

Filter JSON output using a jq expression

[**-t**, **--template** **&lt;string&gt;**](#t)

Format JSON output using a Go template; see "gh help formatting"

# [OPTIONS INHERITED FROM PARENT COMMANDS](#OPTIONS_INHERITED_FROM_PARENT_COMMANDS)

[**-R**, **--repo** **&lt;\[HOST/\]OWNER/REPO&gt;**](#R)

Select another repository using the \[HOST/]OWNER/REPO format

# [EXIT CODES](#EXIT_CODES)

0: Successful execution

1: Error

2: Command canceled

4: Authentication required

NOTE: Specific commands may have additional exit codes. Refer to the command's help for more information.

# [EXAMPLE](#EXAMPLE)

```
# Verify an asset from the latest release
$ gh release verify-asset ./dist/my-asset.zip
# Verify an asset from a specific release tag
$ gh release verify-asset v1.2.3 ./dist/my-asset.zip
# Verify an asset from a specific release tag and output the attestation in JSON format
$ gh release verify-asset v1.2.3 ./dist/my-asset.zip --format json
```

# [SEE ALSO](#SEE_ALSO)

[**gh-release(1)**](/man/os/gh/gh-release.1)

Oct 2026

---

Document: gh-release-verify-asset(1) from gh 2.103.3-r1 (Chainguard OS)
Source: https://github.com/cli/cli
