Skip to content

Conversation

malancas
Copy link
Contributor

Add documentation around the output printed by gh attestation verify when the --format json flag is included.

cc #9850

malancas and others added 2 commits February 13, 2025 08:31
@malancas malancas marked this pull request as ready for review February 13, 2025 19:09
@malancas malancas requested a review from a team as a code owner February 13, 2025 19:09
@cliAutomation cliAutomation added the external pull request originating outside of the CLI core team label Feb 13, 2025
Comment on lines +89 to +92
fields used during the verification process. This includes:
- The attestation's signature
- The attestation's statement
- The attestation's predicate
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this a comprehensive list? And just checking, is this the right place to list what fields are used during the verification process? Maybe we could note what is verified under the "By default, the verify command will:" section, and then in the --json helper notes we can mention that details used for verification are within the verificationResult object.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It isn't an exhaustive list, it just includes a lists a few fields surfaced in the verificationResult object the user might find particularly useful. These could definitely be moved under a json helper notes section.

Copy link
Contributor

@jkylekelly jkylekelly Mar 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah okay, it might be good to say "This includes useful fields, such as: " or similar. Just in case others assume it's exhaustive.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm going to take a stab at this tomorrow fwiw.

@malancas
Copy link
Contributor Author

Superseded by #10685

@malancas malancas closed this Mar 26, 2025
@malancas malancas deleted the gh-att-verify-output-docs branch May 28, 2025 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
external pull request originating outside of the CLI core team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants