Verify an artifact

This page checks whether a file was produced by an Attestable Build. When you drop a file here, your browser hashes it locally and sends only the hash to our server. The server looks the hash up in the public registry and checks the signed in-toto and SLSA provenance attestation against the transparency log.

You can read more about our work at lightsquares.dev.