For complete examples, see the guides. This reference is generated from CLI help.

packslip keygen

• Usage: packslip keygen [-o --out <OUT>]

Generate an Ed25519 key pair for the sigstore-key scheme

Writes a secret seed to –out (mode 0600 on Unix) and a minisign-format public key beside it with a .pub extension. Refuses to overwrite either file. Keep the secret private; distribute the public key to consumers. A supported CI OIDC identity can sign without a long-lived key.

Flags

• -o --out <OUT> — Where to write the secret key

  Default: packslip.key

• -h --help — Print help