Build provenance
This page lists the exact commit and CI run this site was built from. Verify it against the public repo.
Release
Commit
Repository
CI run
Built at
5/1/2026, 5:52:53 AM
How to verify
The quick check: confirm the release, commit, and CI run links above all exist in the public repo. The cryptographic check, for anyone who wants real proof:
gh release download v1.0.1 --repo blastin-dev/sealbox -p '*.tar.gz' gh attestation verify sealbox-v1.0.1.tar.gz --repo blastin-dev/sealbox
The artifact is signed via Sigstore using GitHub's OIDC identity (SLSA build provenance). The signature ties the bundle to this exact workflow run, repo, and commit — no shared secret to leak.