Verifying the integrity of a release

You can avoid tampering and accidental changes by ensuring the releases you use have not been modified after publication.

Tool navigation

참고 항목

Immutable releases are currently in 공개 미리 보기 and subject to change.

Before you can validate the authenticity of a release and its assets on the command line, you need to install the GitHub CLI.

On the command line, open the repository containing the release you want to verify.
To verify a release exists and is immutable, run the following command:
Bash
```
gh release verify RELEASE-TAG
```
```
gh release verify RELEASE-TAG
```
To verify a local artifact is an exact match for a release asset, run the following command:
Bash
```
gh release verify-asset RELEASE-TAG ARTIFACT-PATH
```
```
gh release verify-asset RELEASE-TAG ARTIFACT-PATH
```
참고 항목

This command cannot be used to verify the source code zip file or tarball for a release, since these assets are only created when a download is requested.

GitHub에서 리포지토리의 기본 페이지로 이동합니다.
파일 목록의 오른쪽에서 릴리스를 클릭합니다.
To the left of the release you want to verify, below the release author, confirm that " Immutable" is present.