File: gittuf_attest_github_pull-request.md

package info (click to toggle)
gittuf 0.12.0-2
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 3,692 kB
  • sloc: python: 85; makefile: 58; sh: 1
file content (39 lines) | stat: -rw-r--r-- 1,871 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
## gittuf attest github pull-request

Record GitHub pull request information as an attestation

### Synopsis

The 'pull-request' command creates an attestation for a GitHub pull request. It supports attesting either by pull request number or a specific commit and its associated base branch. These attestations help verify the origin and legitimacy of code contributions merged via GitHub. The command also supports custom GitHub base URLs for enterprise GitHub instances, with the flag '--base-URL'.

```
gittuf attest github pull-request [flags]
```

### Options

```
      --base-URL string           location of GitHub instance (default "https://github.com")
      --base-branch string        base branch for pull request, used with --commit
      --commit string             commit to record pull request attestation for
  -h, --help                      help for pull-request
      --pull-request-number int   pull request number to record in attestation (default -1)
      --repository string         path to base GitHub repository the pull request is opened against, of form {owner}/{repo}
```

### Options inherited from parent commands

```
      --create-rsl-entry             create RSL entry for attestation change immediately (note: the new entry to the RSL will not be synced with the remote)
      --no-color                     turn off colored output
      --profile                      enable CPU and memory profiling
      --profile-CPU-file string      file to store CPU profile (default "cpu.prof")
      --profile-memory-file string   file to store memory profile (default "memory.prof")
  -k, --signing-key string           signing key to use to sign attestation
      --verbose                      enable verbose logging
```

### SEE ALSO

* [gittuf attest github](gittuf_attest_github.md)	 - Tools to attest about GitHub actions and entities