Skip to content
Kindgi

kindgi exports

Signed exports: check one (an audit bundle, provenance, compliance evidence).

kindgi exports verify

Section titled “kindgi exports verify”

Check a signed export (an approval's audit bundle, a run's provenance, compliance evidence): that its bytes are the ones signed, and, with --trust or --from-runtime, who signed them. Exit 0 when it checks out, 1 when it doesn't.

Terminal window
kindgi exports verify <file> [--trust=<public-key.pem>]... [--from-runtime]

Flags:

  • --from-runtime: Trust the keys the runtime signs exports with (GET /v1/export-signing-keys).
  • --trust <value>: A public key file (PEM) you trust. Repeat for several. (repeatable)

Every command also takes the global flags.