pacvamp-repo verdict

• Usage: pacvamp-repo verdict <FLAGS>

Append a verdict to the signed verdict feed

One verdict is one reviewer's judgement of an AUR recipe at a commit or of a built package by digest. Every reviewer, static rules, an antivirus scan, a human, or an AI, writes the same document; clients weight them by kind. The feed's sequence advances and it is re-signed.

Flags

• -f --feed <FEED> — The verdicts.json to update (created when missing)

• -k --key <KEY> — The feed signing key

• --pkgbase <PKGBASE> — The AUR pkgbase the verdict is about (with --commit)

• --commit <COMMIT> — The commit reviewed

• --sha256 <SHA256> — The built package digest reviewed instead

• --kind <KIND> — The reviewer kind: static, av, ai, human, reproducible

• --reviewer <REVIEWER> — The reviewer id, such as a username or tool name

• --reviewer-version <REVIEWER_VERSION> — The reviewer's version, model, or rules hash

• --verdict <VERDICT> — pass, flag, or block

• --summary <SUMMARY> — A one-line summary

  Default: ``

• --finding <FINDING> — A finding id, repeatable

• --from <FROM> — Append every verdict in this JSON array instead

• -h --help — Print help