+ mkdir gittuf-get-started
+ cd gittuf-get-started
+ mkdir keys
+ cd keys
+ ssh-keygen -q -t ecdsa -N '' -f root
+ ssh-keygen -q -t ecdsa -N '' -f policy
+ ssh-keygen -q -t ecdsa -N '' -f developer
+ cd ..
+ mkdir repo
+ cd repo
+ git init -q -b main
+ git config --local gpg.format ssh
+ git config --local user.signingkey ../keys/developer
+ gittuf trust init -k ../keys/root
+ gittuf trust add-policy-key -k ../keys/root --policy-key ../keys/policy.pub
+ gittuf policy init -k ../keys/policy --policy-name targets
+ gittuf policy add-key -k ../keys/policy --public-key ../keys/developer.pub
+ gittuf policy add-rule -k ../keys/policy --rule-name protect-main --rule-pattern git:refs/heads/main --authorize-key ../keys/developer.pub
Flag --authorize-key has been deprecated, use --authorize instead
+ gittuf policy stage --local-only
+ gittuf policy apply --local-only
+ echo 'Hello, world!'
+ git add .
+ git commit -q -S -m 'Initial commit'
+ gittuf rsl record main --local-only
+ gittuf verify-ref main
