docs: update attestation instructions in binary readme

This commit is contained in:
Thomas Waldmann 2025-11-02 18:48:08 +01:00
parent 4be4609445
commit eba3f8cfb0
No known key found for this signature in database
GPG key ID: 243ACFA951F78E01

View file

@ -80,7 +80,7 @@ use a recent version that supports "gh attestation".
Practical example (Linux, 2.0.0b20 tag):
curl -LO https://github.com/borgbackup/borg/releases/download/2.0.0b20/borg-linux-glibc235-x86_64-gh
gh attestation verify --repo borgbackup/borg --ref 2.0.0b20 ./borg-linux-glibc235-x86_64-gh
gh attestation verify --repo borgbackup/borg --source-ref refs/tags/2.0.0b20 borg-linux-glibc235-x86_64-gh
If verification succeeds, gh prints a summary stating the subject (your file),
that it was attested by GitHub Actions, and the job/workflow reference.