Used for conformance testing and internal processes. This is not meant for public consumption, we will not support any usecase that uses this.
./gradlew sigstore-cli:run
./gradlew sigstore-cli:run --args="sign --bundle=bundle.json <artifact>"
./gradlew sigstore-cli:run --args="sign --certificate=cert.pem --signature=sig <artifact>"
./gradlew sigstore-cli:run --args="verify --bundle=bundle.json <artifact>"
./gradlew sigstore-cli:run --args="verify --certificate=cert.pem --signature=sig <artifact>"
./gradlew sigstore-cli:run --args="verify <...> --certificate-identity="[email protected]" --certificate-oidc-issuer="https://accounts.example.com" <artifact>"