{"id":19107298,"url":"https://github.com/govtechsg/attest","last_synced_at":"2025-07-04T12:32:59.856Z","repository":{"id":45177127,"uuid":"363663955","full_name":"GovTechSG/attest","owner":"GovTechSG","description":null,"archived":false,"fork":false,"pushed_at":"2022-01-03T15:53:51.000Z","size":9,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-03-16T23:11:28.445Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GovTechSG.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-05-02T13:58:28.000Z","updated_at":"2023-04-27T05:54:20.000Z","dependencies_parsed_at":"2022-09-06T03:10:16.997Z","dependency_job_id":null,"html_url":"https://github.com/GovTechSG/attest","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/GovTechSG/attest","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GovTechSG%2Fattest","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GovTechSG%2Fattest/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GovTechSG%2Fattest/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GovTechSG%2Fattest/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GovTechSG","download_url":"https://codeload.github.com/GovTechSG/attest/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GovTechSG%2Fattest/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263542014,"owners_count":23477454,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-09T04:12:03.541Z","updated_at":"2025-07-04T12:32:59.840Z","avatar_url":"https://github.com/GovTechSG.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# attest\n\nattest is a tool for downloading terraform and verify that the SHASUM matches the archive.\n\n## What is actually run in the back background\n\n1. Import hashicorp public key using gpg\n2. Download the archive, SHA256SUM, and SHA256SUM.sig files\n3. Verify is signature file is not tampered with\n4. Verify the SHASUM matches the archive\n5. Install to tfenv if argument \"install-tfenv\" was passed to command\n\n## Prerequiste\n\n1. gpg - OpenPGP encryption and signing tool\n\n## How to setup\n\n1. Download Hashicorp public key from https://www.hashicorp.com/security\n2. Store Hashicorp public key from step 2 to $HOME/.gnupg/hashicorp.asc\n3. `git clone \u003cattest_repo_url\u003e`\n4. `ln -s /\u003cpath_to_attest_repo\u003e/attest.sh /usr/local/bin/attest`\n\n## Usage\n\n```bash\nExample:\n# Download and verify terraform package\nUsage: attest terraform \u003cverion number\u003e\n\n# Deploy package to tfenv\nUsage: attest terraform \u003cverion number\u003e install-tfenv\n\nterraform \u003cverion number\u003e                  Terraform version number to download and attest (eg. 0.15.4)\ninstall-tfenv                              Install terraform to tfenv\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgovtechsg%2Fattest","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgovtechsg%2Fattest","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgovtechsg%2Fattest/lists"}