01
Choose the artifact
Identify the exact file or version you will record.
Loading…
For developers
Associate a signed record with the version of code or a release artifact you want to share.
What this means for you
A recorded fingerprint can help someone compare an artifact with the version that was signed. The identity and context of the issuer remain important to interpreting that proof.
A record does not independently establish copyright ownership or guarantee that the code is safe.
From idea to use
Identify the exact file or version you will record.
Use a supported issuing workflow to sign the relevant information.
Provide verification information alongside the artifact.