Enum ArtifactSubcommand 

pub enum ArtifactSubcommand {
    Sign {
        file: PathBuf,
        sig_output: Option<PathBuf>,
        key: Option<String>,
        device_key: Option<String>,
        expires_in: Option<u64>,
        note: Option<String>,
        commit: Option<String>,
        no_commit: bool,
        ci: bool,
        ci_platform: Option<String>,
        log: Option<String>,
        allow_unlogged: bool,
    },
    Publish {
        file: Option<PathBuf>,
        signature: Option<PathBuf>,
        package: Option<String>,
        registry: String,
        key: Option<String>,
        device_key: Option<String>,
        expires_in: Option<u64>,
        note: Option<String>,
        commit: Option<String>,
        no_commit: bool,
    },
    Verify {
        file: PathBuf,
        signature: Option<PathBuf>,
        identity_bundle: Option<PathBuf>,
        witness_receipts: Option<PathBuf>,
        witness_keys: Vec<String>,
        witness_threshold: usize,
        verify_commit: bool,
        offline: bool,
        roots: Option<PathBuf>,
        member: Option<String>,
        signed_at: Option<u128>,
        json: bool,
    },
}

Variants

Sign

Sign an artifact file with your Auths identity.

Fields

file: PathBuf

Path to the artifact file to sign.

sig_output: Option<PathBuf>

Output path for the signature file. Defaults to .auths.json.

key: Option<String>

Local alias of the identity key (used for signing). Omit for CI device-only signing.

device_key: Option<String>

Local alias of the device key (used for dual-signing). Auto-detected when only one key exists for the identity.

expires_in: Option<u64>

Duration in seconds until expiration (per RFC 6749).

note: Option<String>

Optional note to embed in the attestation.

commit: Option<String>

Git commit SHA to embed in the attestation (auto-detected from HEAD if omitted).

no_commit: bool

Do not embed any commit SHA in the attestation.

ci: bool

Use ephemeral CI signing (no keychain needed). Requires –commit.

ci_platform: Option<String>

CI platform override when –ci is used outside a detected CI environment.

log: Option<String>

Transparency log to submit to (overrides default from trust config).

allow_unlogged: bool

Skip transparency log submission (local testing only). Produces an unlogged attestation that verifiers reject by default.

Publish

Sign and publish an artifact attestation to a registry.

Auto-signs the artifact when no –signature is provided.

Fields

file: Option<PathBuf>

Artifact file to sign and publish (auto-signs if no –signature).

signature: Option<PathBuf>

Path to an existing .auths.json signature file. Defaults to .auths.json.

package: Option<String>

Package identifier for registry indexing (e.g., npm:react@18.3.0).

registry: String

Registry URL to publish to.

key: Option<String>

Local alias of the identity key. Omit for device-only CI signing.

device_key: Option<String>

Local alias of the device key. Auto-detected when only one key exists.

expires_in: Option<u64>

Duration in seconds until expiration.

note: Option<String>

Optional note to embed in the attestation.

commit: Option<String>

Git commit SHA to embed in the attestation (auto-detected from HEAD if omitted).

no_commit: bool

Do not embed any commit SHA in the attestation.

Verify

Verify an artifact’s signature against an Auths identity.

Fields

file: PathBuf

Path to the artifact file to verify.

signature: Option<PathBuf>

Path to the signature file. Defaults to .auths.json.

identity_bundle: Option<PathBuf>

Path to identity bundle JSON (for CI/CD stateless verification).

witness_receipts: Option<PathBuf>

Path to witness signatures JSON file.

witness_keys: Vec<String>

Witness public keys as DID:hex pairs (e.g., “did:key:z6Mk…:abcd1234…”).

witness_threshold: usize

Number of witnesses required (default: 1).

verify_commit: bool

Also verify the source commit’s signing attestation.

offline: bool

Verify an air-gapped org bundle entirely offline (no network access).

roots: Option<PathBuf>

Override the pinned trust roots path (default: .auths/roots).

member: Option<String>

(offline) Member did:keri to classify authority for.

signed_at: Option<u128>

(offline) The artifact’s in-band signing KEL position.

json: bool

(offline) Emit the typed verdict as JSON.

Trait Implementations

impl Clone for ArtifactSubcommand

fn clone(&self) -> ArtifactSubcommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ArtifactSubcommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for ArtifactSubcommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for ArtifactSubcommand

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand