원클릭으로
cosign-validate
Validates an AI resource using SHA-256 integrity and Sigstore authenticity sidecars.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
Validates an AI resource using SHA-256 integrity and Sigstore authenticity sidecars.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Stop CodeQL residual thrashing on Percussion CMS PRs. Use when working code-scanning alerts, security advisories, SSRF/LDAP/path/XXE fixes, // codeql suppressions, query-filters, model packs, or PR checks named CodeQL / Analyze (java-kotlin).
Strict pre-commit / pre-PR code review for Percussion CMS (Erlang persona). Use when the user says "Erlang", "review my changes", "pre-commit review", "pre-PR review", "strict review", or before git commit / gh pr create. Independent review only; blocks on bugs, missing behavioral tests, and non-portable (Windows/Unix) file path handling. Loads review memory and writes durable reports under docs/ai-generated/code-reviews/.
A skill for writing clean, maintainable, and effective Java unit tests using JUnit 5 and Mockito. Use when the user asks for "unit tests", "test cases", "tests", "JUnit", "Mockito", or related terms. Also use for migrating JUnit 3/4 tests to JUnit 5.
Best practices and version-correct Javadoc comment generation for percussioncms. Use when the user asks for "Javadoc", "Java documentation", "doc comments", "doc", "documentation", or related terms.
Use when the user needs to create, apply, verify, or revert patches for source files using the Linux diff and patch utilities, or when generating sed-based inline edits as a lightweight alternative.
Centralized skill to verify the integrity and authenticity of AI resources (skills, prompts, instructions). Uses SHA-256 hashing and Sigstore sidecar signatures.
| name | cosign-validate |
| description | Validates an AI resource using SHA-256 integrity and Sigstore authenticity sidecars. |
| version | 1 |
Purpose: Verify the status of an AI resource.
#!/bin/bash
REPO_ROOT=$(git rev-parse --show-toplevel)
"$REPO_ROOT/mvn-env.sh" -pl modules/ai-shared-develop exec:java \
-Dexec.mainClass="com.percussion.ai.signing.ResourceVerifier" \
-Dexec.args="$1"