Skip to main content

diagrid workflow archive print-certs

Print the certificates that signed a workflow archive

Description​

Print the certificates that signed a workflow history archive, as text.

Two sets are printed: the certificates the archive's own signatures were made with, and the external certificates it carries to verify attestations propagated from child workflows and activities. Each is decoded from its signed raw bytes — the source of truth — and printed with its SPIFFE identity and the full chain up to the issuing Sentry CA.

An archive whose history is unsigned carries no certificates, and the command says so. It does not verify signatures — use "diagrid workflow archive verify" for that, and "diagrid workflow archive trust-anchor" to print the CA bundle these certificates chain to.

diagrid workflow archive print-certs <archive-file> [flags]

Examples​


  # Print the signing certificates in an archive
  diagrid workflow archive print-certs wf-123.json

  # Read the archive from stdin
  cat wf-123.json | diagrid workflow archive print-certs -

Options​

  -h, --help   help for print-certs

Options inherited from parent commands​

      --api-key string   Diagrid Cloud API key

SEE ALSO​

Last updated on