sign Command¶
gtb sign <input-file> produces an ASCII-armored OpenPGP detached signature
for a file using a configured signing backend. It is part of the
framework-developer CLI. See Sign Releases for
the CI procedure and Signing for the
backend model.
Usage¶
Exactly one input file is required. The signature is written next to the input (or
to --output).
Flags¶
| Flag | Default | Description |
|---|---|---|
--backend |
(required) | Signing backend (aws-kms, local, …). |
--key-id |
(required) | Key id/ARN/alias (or PEM path for the local backend). |
--public-key |
(required) | Path to the armored OpenPGP public key (.asc) the signature identifies. |
--output |
(input + .sig) |
Path to write the detached signature. |
--created |
(now) | Fixed signature creation timestamp (RFC3339) for reproducibility. |
Run with
--helpfor the complete, authoritative flag set.