attest
Signed, tamper-evident provenance for AI-assisted code changes, built with in-toto, DSSE, Sigstore, and GitHub Actions
What XERJ indexed
Selected work
“Prepare the v0.1.6 Action security release”. 16 files, 564 lines in action, packages/attest-store, scripts.
Licence
The repository
From GitHub's licence detection. A person still checks the LICENSE file at the pinned commit.
The XERJ corpus
The author agreed by email on 2026-10-23. Same terms as the repository. Answers name the repo, the commit and the file:line.
in licence reviewnot in the hub yetsuggested use: adapt with attribution
ai-governanceai-provenancecode-provenancedevsecopsgithub-actionsin-totoopen-sourcepython
Example questions
- How does attest implement ai-governance?
- Where does attest handle “Prepare the v0.1.6 Action security release”?
- What does action do in attest?
The prompt
Paste it into your AI agent. It clones Parth2412/attest at the pinned commit and indexes it on your machine.
Search the GitHub repository Parth2412/attest with XERJ (https://hub.xerj.org/corpus/parth2412--attest). Run these in a shell, in order, and check each result before the next: 1. xerj --help (success: it prints usage). If xerj is missing: curl -fsSL https://xerj.org/get | sh 2. git clone https://github.com/Parth2412/attest attest && git -C attest checkout e693e6b60afdf9c667a913faa4f9652bfd6dc050 3. Start a local node and leave it running: xerj --insecure --data-dir ./xerj-data 4. xerj autoindex ./attest --url http://127.0.0.1:9200 --prefix attest --progress plain 5. xerj autoindex map --url http://127.0.0.1:9200 Then answer my question from the indexed files and cite the ax_path of every hit. Query syntax: https://xerj.org/llms.txt Licence: Apache-2.0. Keep the copyright notice and credit the authors.
Related
Parth KaloliyaAI, prompts and agents corporaann-benchmarkshttpxcognitaMSKazemi/novafabricsinceaihq/ai-shipcheckhelloyhcby163/FileSyncTool
Selected work and consent: the XERJ registry.