Evidary CLI

Offline verification CLI for Evidary evidence bundles.

Install

npm install -g evidary-cli

Or run via npx:

npx evidary-cli verify seal.zip

Commands

Verify a bundle

evidary verify seal.zip --jwks jwks.json --output report.json --json --pretty

Options:

• --jwks Path to JWKS JSON file.
• --output Write JSON report to a file.
• --json Print JSON report to stdout.
• --pretty Pretty-print JSON output.
• --allow-partial Skip DSSE/STH verification if JWKS is unavailable.
• --verbose Print extra details and issues.

Exit codes:

• 0 - verification OK or WARNING
• 1 - verification FAILED
• 2 - CLI error

Show bundle info

evidary info seal.zip --list-files

Extract bundle

evidary extract seal.zip --dest ./bundle-output

Features

• Offline verification (no network required)
• DSSE signature verification (JWKS required)
• STH signature and proof verification
• Payload integrity checks
• JSON verification reports (CLI)

Requirements

• Node.js >= 18

Notes

• TSA tokens are detected but not validated yet; the check is reported as SKIPPED.
• PDF reports are not available in the CLI (Portal provides PDF + HTML downloads).
• This package is evidary-cli (unscoped); @evidary/cli is not used at this time.