GitHub CLI | Take GitHub to the command line Skip to content CLI Copilot CLI Manual Release notes * Getting started * gh * agent-task * create * list * view * alias * delete * import * list * set * api * attestation * download * trusted-root * verify * auth * login * logout * refresh * setup-git * status * switch * token * browse * cache * delete * list * codespace * code * cp * create * delete * edit * jupyter * list * logs * ports * ports forward * ports visibility * rebuild * ssh * stop * view * completion * config * clear-cache * get * list * set * copilot * discussion * comment * create * edit * list * view * extension * browse * create * exec * install * list * remove * search * upgrade * gist * clone * create * delete * edit * list * rename * view * gpg-key * add * delete * list * help * environment * exit-codes * formatting * mintty * reference * telemetry * issue * close * comment * create * delete * develop * edit * list * lock * pin * reopen * status * transfer * unlock * unpin * view * label * clone * create * delete * edit * list * licenses * org * list * pr * checkout * checks * close * comment * create * diff * edit * list * lock * merge * ready * reopen * revert * review * status * unlock * update-branch * view * preview * prompter * project * close * copy * create * delete * edit * field-create * field-delete * field-list * item-add * item-archive * item-create * item-delete * item-edit * item-list * link * list * mark-template * unlink * view * release * create * delete-asset * delete * download * edit * list * upload * verify-asset * verify * view * repo * archive * autolink * autolink create * autolink delete * autolink list * autolink view * clone * create * delete * deploy-key * deploy-key add * deploy-key delete * deploy-key list * edit * fork * gitignore * gitignore list * gitignore view * license * license list * license view * list * read-dir * read-file * rename * set-default * sync * unarchive * view * ruleset * check * list * view * run * cancel * delete * download * list * rerun * view * watch * search * code * commits * issues * prs * repos * secret * delete * list * set * skill * install * list * preview * publish * search * update * ssh-key * add * delete * list * status * variable * delete * get * list * set * workflow * disable * enable * list * run * view CLI manual * Getting started * gh * agent-task * create * list * view * alias * delete * import * list * set * api * attestation * download * trusted-root * verify * auth * login * logout * refresh * setup-git * status * switch * token * browse * cache * delete * list * codespace * code * cp * create * delete * edit * jupyter * list * logs * ports * ports forward * ports visibility * rebuild * ssh * stop * view * completion * config * clear-cache * get * list * set * copilot * discussion * comment * create * edit * list * view * extension * browse * create * exec * install * list * remove * search * upgrade * gist * clone * create * delete * edit * list * rename * view * gpg-key * add * delete * list * help * environment * exit-codes * formatting * mintty * reference * telemetry * issue * close * comment * create * delete * develop * edit * list * lock * pin * reopen * status * transfer * unlock * unpin * view * label * clone * create * delete * edit * list * licenses * org * list * pr * checkout * checks * close * comment * create * diff * edit * list * lock * merge * ready * reopen * revert * review * status * unlock * update-branch * view * preview * prompter * project * close * copy * create * delete * edit * field-create * field-delete * field-list * item-add * item-archive * item-create * item-delete * item-edit * item-list * link * list * mark-template * unlink * view * release * create * delete-asset * delete * download * edit * list * upload * verify-asset * verify * view * repo * archive * autolink * autolink create * autolink delete * autolink list * autolink view * clone * create * delete * deploy-key * deploy-key add * deploy-key delete * deploy-key list * edit * fork * gitignore * gitignore list * gitignore view * license * license list * license view * list * read-dir * read-file * rename * set-default * sync * unarchive * view * ruleset * check * list * view * run * cancel * delete * download * list * rerun * view * watch * search * code * commits * issues * prs * repos * secret * delete * list * set * skill * install * list * preview * publish * search * update * ssh-key * add * delete * list * status * variable * delete * get * list * set * workflow * disable * enable * list * run * view gh attestation trusted-root gh attestation trusted-root [--tuf-url <url> --tuf-root <file-path>] [--verify-only] [flags] Output contents for a trusted_root.jsonl file, likely for offline verification. When using gh attestation verify , if your machine is on the internet, this will happen automatically. But to do offline verification, you need to supply a trusted root file with --custom-trusted-root ; this command will help you fetch a trusted_root.jsonl file for that purpose. You can call this command without any flags to get a trusted root file covering the Sigstore Public Good Instance as well as GitHub's Sigstore instance. Otherwise you can use --tuf-url to specify the URL of a custom TUF repository mirror, and --tuf-root should be the path to the root.json file that you securely obtained out-of-band. If you just want to verify the integrity of your local TUF repository, and don't want the contents of a trusted_root.jsonl file, use --verify-only . Options --hostname <string> Configure host to use --tuf-root <string> Path to the TUF root.json file on disk --tuf-url <string> URL to the TUF repository mirror --verify-only Don't output trusted_root.jsonl contents Examples # Get a trusted_root.jsonl for both Sigstore Public Good and GitHub's instance $ gh attestation trusted-root See also * gh attestation Product * Features * Security * Enterprise * Customer stories * Pricing * Resources Platform * Developer API * Partners * GitHub Desktop * GitHub Mobile Support * Help * Community Forum * Expert Services * Status * Contact GitHub Company * About * Blog * Careers * Press * Shop * (c) 2026 GitHub, Inc. * Terms * Privacy * Telemetry * * * * *