Scroll to navigation

WITNESS(1) User Commands WITNESS(1)

NAME

witness - Witness command-line tool

DESCRIPTION

Collect and verify attestations about your build environments

Usage:

witness [command]

Available Commands:

Get information about available attestors
Generate completion script
Help about any command
Manage policies
Runs the provided command and records attestations about the execution
Signs a file
Verifies a witness policy
Prints out the witness version

Flags:

Path to the witness config file
Path to store the CPU profile. Profiling will be enabled if this is non-empty
Path to store the Memory profile. Profiling will be enabled if this is non-empty
help for witness
Level of logging to output (debug, info, warn, error) (default "info")

Use "witness [command] --help" for more information about a command.

April 2026 witness 0.11.0-1