Skip to main content

diagrid workflow archive trust-anchor

Print the CA bundle that verifies a project's workflow archives

Description​

Print the CA bundle (PEM) that anchors the signing certificates in the workflow history archives of a project's region. Use it to verify archives offline:

diagrid workflow archive trust-anchor -p my-project > sentry-ca.pem diagrid workflow archive verify wf-123.json --trust-anchor sentry-ca.pem

The bundle may contain more than one certificate authority, because which one signs an archive depends on the app that produced it.

Note: this returns the authorities that are current. Because Sentry roots rotate, it verifies recently-produced archives; verifying older archives may require the bundle that was current when they were produced.

diagrid workflow archive trust-anchor [flags]

Examples​


  # Print the trust anchor to stdout
  diagrid workflow archive trust-anchor -p my-project

  # Save it to a file
  diagrid workflow archive trust-anchor -p my-project --out sentry-ca.pem

Options​

  -p, --project string   Name of existing project
      --out string       Write the PEM bundle to this file instead of stdout
  -h, --help             help for trust-anchor

Options inherited from parent commands​

      --api-key string   Diagrid Cloud API key

SEE ALSO​

Last updated on