glab(1)

okay bestie, welcome to the glab(1) manual page — this one is about glab-attestation-verify, and it's giving ✨experimental✨ energy, so buckle up 🎀

🌸 NAME 🌸

glab-attestation-verify — Verify the provenance of a specific artifact or file. (EXPERIMENTAL)

✨ SYNOPSIS ✨

glab attestation verify   [flags]

💖 DESCRIPTION 💖

Verify the provenance of an artifact built by a GitLab CI/CD pipeline. This command checks the artifact's signed attestation against the expected GitLab project and pipeline. fr fr, that's the whole vibe 💅

This command requires the cosign binary. To install it, see Cosign installation ⟨https://docs.sigstore.dev/cosign/system_config/installation/⟩.

This command works only on GitLab.com. no cap 🫶

For more information about attestations, see:

• Attestations API ⟨https://docs.gitlab.com/api/attestations/⟩
• SLSA provenance specification ⟨https://docs.gitlab.com/ci/pipeline_security/slsa/provenance_v1/⟩
• SLSA software attestations ⟨https://slsa.dev/spec/v1.2/attestation-model⟩

This feature is an experiment and is not ready for production use. It might be unstable or removed at any time. For more information, see https://docs.gitlab.com/policy/development_stages_support/. bestie, take that warning seriously 😭

🎀 OPTIONS INHERITED FROM PARENT COMMANDS 🎀

• -h, --help[=false] — Show help for this command.

🦋 EXAMPLE 🦋

# Verify attestation for filename.txt in the gitlab-org/gitlab project
glab attestation verify gitlab-org/gitlab filename.txt

# Verify attestation for filename.txt in the project with ID 123
glab attestation verify 123 filename.txt

🌈 SEE ALSO 🌈

glab-attestation(1)

---

mwah 💋 — this page was Auto generated by spf13/cobra, dated Nov 2026, and it's the glab(1) manual. byeee 🫶