client-cli manual

Reference for all client commands.

Keys

• new-keys — generate a new signing key pair

Signers

• new-signers-file — create a signers file defining authorized keys and thresholds
• update-signers — propose an update to an existing signers file

Registration

• register-repo — register a repository with the backend
• register-assets — register assets (GitHub release or checksum files) for signing

Signing

• list-pending — list files that still need your signature
• sign-pending — sign a pending file
• signature-status — check a file’s signature collection status

Revocation

• revoke — revoke a previously signed file

Verification

• download — download a file with signature verification