docs

userdocs · Oct 3, 2024 · ddf0a7c · ddf0a7c
1 parent 406ee9d
commit ddf0a7c
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/docs/astro.config.mjs b/docs/astro.config.mjs
@@ -103,6 +103,10 @@ export default defineConfig({
 							label: "Systemd",
 							link: "/systemd",
 						},
+						{
+							label: "Github - Artifact Attestations",
+							link: "/artifact-attestations",
+						},
 						{
 							label: "Github actions",
 							link: "/github-actions",

diff --git a/docs/src/content/docs/artifact-attestations.mdx b/docs/src/content/docs/artifact-attestations.mdx
@@ -0,0 +1,18 @@
+---
+title: artifact attestations
+description: artifact attestations
+---
+
+import { Advanced, Charts, Details, Modal, Steps, Tabs, TabItem, Card, CardGrid, LinkCard, Aside, Icon } from "/src/components/global.jsx"
+
+From releases after the 03/10/2024 you can use the `artifact_attestations` to verify the provenance of the build.
+
+https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds
+
+Using `gh` cli you can use this command to verify the provenance of the build:
+
+For example, using the `x86_64-qbittorrent-nox` build:
+
+```bash
+gh attestation verify x86_64-qbittorrent-nox -o userdocs
+```