Choose a signer
Cilock supports nine signer providers. This guide is the decision tree, pick the path that matches your environment, then jump to the relevant config detail.
Store attestations in Archivista
Archivista is the searchable evidence store cilock integrates with by default. This guide covers how to configure cilock to push signed attestations to it, and how to retrieve them later.
Verify in a release gate
This guide is the operational counterpart to the release promotion gate tutorial. The tutorial shows you a worked example. This guide covers the design decisions you'll hit when wiring it into a real production environment.
Add a custom attestor
When the 30+ attestors in the default cilock binary don't capture what you need, write your own. This guide walks through the rookery attestation.Attestor interface, the lifecycle hooks, and how to ship a custom attestor as a Go module that downstream binaries can blank-import.