Attestable Builds
Verify an artifact
Drop your artifact here to verify
or click to select a file
Verify artifacts from an Attestable Build pipeline. Drop a file and your browser will hash it locally. Only the hash is sent to our server, which looks it up in the public registry and verifies the signed in-toto + SLSA Provenance attestation against the transparency log.
Learn more about Light Squares and our work on verifiable infrastructure.