From 10cc49ac5b481f6d9359c550be21d691a0ad1a24 Mon Sep 17 00:00:00 2001 From: Praveen K B <30530587+praveen5959@users.noreply.github.com> Date: Tue, 19 Nov 2024 21:49:41 +0530 Subject: [PATCH] docs: Added build attestation verification docs Signed-off-by: Praveen K B <30530587+praveen5959@users.noreply.github.com> --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index eaa9c17a3..2554e1b2f 100644 --- a/README.md +++ b/README.md @@ -121,6 +121,14 @@ Traditionally, logging has been seen as a text search problem. Log volumes were But with log data growing exponentially, today's log data challenges involve whole lot more – Data ingestion, storage, and observation, all at scale. We are building Parseable to address these challenges. +## Verify Image Build Provenance Attestation +All the image builds/pushes are attested for build provenance and integrity using the [attest-build-provenance](https://github.com/actions/attest-build-provenance) action. The attestations can be verified by having the latest version of [GitHub CLI](https://github.com/cli/cli/releases/latest) installed in your system. Then, execute the following command: + +```sh +gh attestation verify PATH/TO/YOUR/PARSEABLE/ARTIFACT-BINARY -R parseablehq/parseable +``` + + ## Contributing :trophy: