Attested Builds

Attested builds are a new approach to verifiable software distribution. Source code is compiled inside hardware-isolated environments that produce cryptographic proof linking binaries to their exact inputs.Powered by Kettle, Lunal's open-source implementation.

Try an attested build to see how provenance is generated inside a confidential VM. Submit a GitHub repo URL or upload source code. We currently support Cargo and Nix builds (requires Cargo.lock or flake.lock).

Builds are uploaded to a public registry of attested builds, in the GitHub organization named confidential-build-registry. Browse the existing attested builds at https://github.com/orgs/confidential-build-registry/packages.

Try: