capabilities.work

Attach Build Evidence

A 2-step recipe with JFrog. We can help you get access.

Recipe · 2 steps

Attach Build Evidence

with JFrog

Attach evidence to a build and verify it.

  1. Create a signed evidence record attached to the build subject using the supplied predicate and signing key alias.
  2. Verify the cryptographic signature of the newly created evidence record.
What you'll need to have ready
  • buildName: The build name to attach evidence to.
  • buildNumber: The build number to attach evidence to.
  • predicateType: The URI identifying the predicate type.
  • keyAlias: The alias of the registered signing key.
  • predicate: The evidence predicate content.
For your developer

Arazzo workflow jfrog:attach-build-evidence, 2 operations: postV2Evidence → verifyEvidence. Specs on APIs.io.