https://slsa.dev/provenance/v1#24681683
Title of the list
Attestation summary
Created
Apr 16 (Thu, 16 Apr 2026 18:17:39 GMT)Commit
Build Summary
Workflow File
Verify
Certificate Summary
| Key | Value |
|---|---|
| Build Config Digest | 26d2302cb8d6a327de6ab48f85bb039df57848c3 |
| Build Config URI | https://github.com/cli/cli/.github/workflows/deployment.yml@refs/heads/trunk |
| Build Signer Digest | 26d2302cb8d6a327de6ab48f85bb039df57848c3 |
| Build Signer URI | https://github.com/cli/cli/.github/workflows/deployment.yml@refs/heads/trunk |
| Build Trigger | workflow_dispatch |
| Issuer | https://token.actions.githubusercontent.com |
| Runner Invocation URI | https://github.com/cli/cli/actions/runs/24526208069/attempts/1 |
| Runner Environment | github-hosted |
| Source Repository Digest | 26d2302cb8d6a327de6ab48f85bb039df57848c3 |
| Source Repository Identifier | 212613049 |
| Source Repository Owner Identifier | 59704711 |
| Source Repository Owner URI | https://github.com/cli |
| Source Repository Ref | refs/heads/trunk |
| Source Repository URI | https://github.com/cli/cli |
| Source Repository Visibility | public |
Subjects
| Subject | Subject digest |
|---|---|
gh_2.90.0_macOS_universal.pkg | sha256:006d42d619192c7406e5dd743d64a5838697cecb3fc851738f1782ec4e741217 |
gh_2.90.0_linux_arm64.tar.gz | sha256:1139e1ad912fcddb5ef4b957530184c2c30d9937ff65ff4e641fbf6ca5f28c7c |
gh_2.90.0_linux_arm64.rpm | sha256:1dfbb5c6f21207f3a848430fb7a43c58b41eb77669f2f24dacda0b9cc7c33605 |
gh_2.90.0_linux_armv6.rpm | sha256:20fd6f96d4eb15b9e609c0af92be7ec1b47a5b21975dfc86ab527fab88caff5b |
gh_2.90.0_linux_386.deb | sha256:33502d742261d4af607e48d2420d4fa2a208de9349a327db7fb3b9b4fbe536d0 |
gh_2.90.0_linux_armv6.deb | sha256:3407801aab12d719b2e242fb53b0cdac9306d4081137bdf262a560c73edbb1ce |
gh_2.90.0_linux_armv6.tar.gz | sha256:51114ce4018701c1afaba921a794859aca91d2845ce128cf8c4bbe616fd24949 |
gh_2.90.0_windows_amd64.msi | sha256:523777a68d9e5610ac116ae9d90e357b116895e9943a22a10fb9ec1a36077a01 |
gh_2.90.0_linux_386.rpm | sha256:59228708e22be4c12d02c4b728db93d31fba4b08d24c08e1766cdde206b35b6a |
gh_2.90.0_windows_arm64.msi | sha256:607d802b7219eb03dcf927699bd76f825f954e6399143f33e87eaa1a46571230 |
gh_2.90.0_windows_arm64.zip | sha256:6c962692ee8285f5b2336455cbe08695ae340dcf433b4b13d8d3d534ebee8ffe |
gh_2.90.0_windows_386.msi | sha256:7007f9aa8de844d63f67dcb37824fe02241b0e68420aa4ef769f5c9ff52b5fc8 |
gh_2.90.0_windows_amd64.zip | sha256:73fcae688eb64ae67828536c9be90db1e5be3f11691a6fa1c1e5418fd24ee10b |
gh_2.90.0_linux_amd64.deb | sha256:7b530eee6a4bc2ad96d6eaa60d54ebd57b5dda4e2491f6aa48a6c679152484b2 |
gh_2.90.0_macOS_arm64.zip | sha256:82a6acdc3f445dc316b70e1bc15b9b7c4b4e26fd30b04de461a7829ad6c6e97f |
gh_2.90.0_linux_amd64.rpm | sha256:87ecf112886a4379ada8f6a20c0a85245e1f79f2aa06b35ea150e5e415e83cdf |
gh_2.90.0_linux_amd64.tar.gz | sha256:b2aef7b23ec6899bf27f37a32c57a7935d0a178568ac33dc9bb03842f724195a |
gh_2.90.0_linux_arm64.deb | sha256:b6ca0f9c942d56ae96fd8219b2d067f76b478d3b46f07e060762e681482f2658 |
gh_2.90.0_windows_386.zip | sha256:c338ddd3cf42c030b46324d78a5583e734075f5d794df84855ee5294b55dd136 |
gh_2.90.0_macOS_amd64.zip | sha256:e44d23dd5f0f8534d7a9989177f2c60ac8ffbcdfc6a0a6e5d1f23c4a3b83a9e0 |
gh_2.90.0_linux_386.tar.gz | sha256:ea6b87cb937065a3e0b99a6d368132c58b8bca90cc9f54756335257ec75793d0 |