chainloop
Use this skill when the user wants to manage software supply chain attestations — sign artifacts, record build provenance, verify SLSA compliance, or integrate attestation into CI/CD pipelines.
소스 정보
- 저장소
- javimosch/supercli
- 최근 소스 활동
- 2026년 7월 20일 19:45
- 감지된 SKILL.md 언어
- 영어
- 스타
- 51
- 포크
- 7
설치 방법
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
소스 파일 검토
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
SKILL.md 표시 중
SKILL.md
소스 지침 · 읽기 전용 미리보기- name
- chainloop
- description
- Use this skill when the user wants to manage software supply chain attestations — sign artifacts, record build provenance, verify SLSA compliance, or integrate attestation into CI/CD pipelines.
# chainloop Plugin
Software supply chain attestation and metadata framework. Record artifact integrity, build provenance, and compliance evidence for SLSA and related standards.
## Installation
```bash
curl -sSL https://raw.githubusercontent.com/chainloop-dev/chainloop/main/install.sh | sh
```
## Basic Usage
```bash
# Check CLI version
chainloop version
# Authenticate with a Chainloop server
chainloop auth login
# Initialize an attestation for a workflow
chainloop attestation init
# Add an artifact to the current attestation
chainloop attestation add --name my-artifact --value ./dist/app.tar.gz
# Push/finalize the attestation
chainloop attestation push
```
## Common Patterns
```bash
# List available workflows
chainloop workflow list
# Run attestation in CI (non-interactive)
chainloop attestation init --workflow my-workflow
chainloop attestation add --name binary --value ./build/output
chainloop attestation push --yes
# Verify an attestation
chainloop attestation verify --digest sha256:abc123...
```
## Usage Examples
- "Create a supply chain attestation for this build artifact"
- "Sign and record provenance for a Docker image in CI"
- "Verify the attestation on a released binary"
## SuperCLI
```bash
sc chainloop _ _ version
sc chainloop _ _ attestation init
sc plugins learn chainloop
```
GitHub에서 보기