Attach signed evidence to an artifact or build
One step with JFrog. We can help you get access.
Get something done
Attach signed evidence to an artifact or build
with JFrog
Use JFrog: its Jfrog Evidence API lets you attach signed evidence to an artifact or build in a single step (POST /v1/evidence). capabilities.work can help you get signed up and connected.
- How do I attach a signed in-toto attestation to an artifact or build?
- Can evidence be attached to a package or a release bundle as well as an artifact?
- What signing key does JFrog use when I create evidence with a key alias?
Say it to your AI assistant
- Create evidence of type {predicate_type} on {subject_type} {subject}.
- Attach a DSSE-signed attestation to {subject_type} {subject} using key {key_alias}.
For your developer
POST /v1/evidence in Jfrog Evidence API. Full spec on APIs.io.