# TestifySec > The platform for developer and agent trust. CI/lock captures the work; Pushgate checks the push; the platform manages gates and technical-control evidence. Match commands and supported capabilities to the installed release. Some imported reference tracks development source. Retain version limits, correction notes, and trust boundaries when quoting. A signature establishes attribution and integrity under configured trust; it does not prove that a producer was honest or that code is safe. Blog posts are dated context, not the current command reference. ## Documentation - [One system.Docs for each product.](https://www.testifysec.com/docs.md) - [Get started with the TestifySec Platform](https://www.testifysec.com/docs/platform.md) - [Platform data model](https://www.testifysec.com/docs/platform/data-model.md) - [Appliance deployment and requirements](https://www.testifysec.com/docs/platform/appliance.md) - [Get started with Pushgate](https://www.testifysec.com/docs/pushgate.md) - [Trust architecture and PKI](https://www.testifysec.com/docs/pushgate/trust-architecture.md) - [Security coverage](https://www.testifysec.com/docs/pushgate/security-coverage.md) - [CI/lock — trust models](https://www.testifysec.com/docs/cilock/trust.md) - [Choose your workflow](https://www.testifysec.com/docs/start/workflows.md) - [System architecture](https://www.testifysec.com/docs/concepts/architecture.md) - [Trust model and evidence limits](https://www.testifysec.com/docs/concepts/trust-model.md) - [Get started with CI/lock](https://www.testifysec.com/docs/cilock.md) - [TestifySec Platform](https://www.testifysec.com/docs/platform/overview.md) - [Pushgate.dev](https://www.testifysec.com/docs/pushgate/overview.md) - [alps-evidence attestor](https://www.testifysec.com/docs/cilock/attestors/alps-evidence.md) - [asff attestor](https://www.testifysec.com/docs/cilock/attestors/asff.md) - [aws-codebuild attestor](https://www.testifysec.com/docs/cilock/attestors/aws-codebuild.md) - [aws-config attestor](https://www.testifysec.com/docs/cilock/attestors/aws-config.md) - [aws attestor](https://www.testifysec.com/docs/cilock/attestors/aws.md) - [base-ancestry attestor](https://www.testifysec.com/docs/cilock/attestors/base-ancestry.md) - [buildpacks attestor](https://www.testifysec.com/docs/cilock/attestors/buildpacks.md) - [command-run attestor](https://www.testifysec.com/docs/cilock/attestors/command-run.md) - [configuration attestor](https://www.testifysec.com/docs/cilock/attestors/configuration.md) - [docker-bench attestor](https://www.testifysec.com/docs/cilock/attestors/docker-bench.md) - [docker attestor](https://www.testifysec.com/docs/cilock/attestors/docker.md) - [environment attestor](https://www.testifysec.com/docs/cilock/attestors/environment.md) - [gcp-iit attestor](https://www.testifysec.com/docs/cilock/attestors/gcp-iit.md) - [git attestor](https://www.testifysec.com/docs/cilock/attestors/git.md) - [github-action attestor](https://www.testifysec.com/docs/cilock/attestors/github-action.md) - [github attestor](https://www.testifysec.com/docs/cilock/attestors/github.md) - [githubwebhook attestor](https://www.testifysec.com/docs/cilock/attestors/githubwebhook.md) - [gitlab attestor](https://www.testifysec.com/docs/cilock/attestors/gitlab.md) - [inclusion-proof attestor](https://www.testifysec.com/docs/cilock/attestors/inclusion-proof.md) - [Attestors overview](https://www.testifysec.com/docs/cilock/attestors.md) - [inspec attestor](https://www.testifysec.com/docs/cilock/attestors/inspec.md) - [instruction-file attestor](https://www.testifysec.com/docs/cilock/attestors/instruction-file.md) - [jenkins attestor](https://www.testifysec.com/docs/cilock/attestors/jenkins.md) - [jwt attestor](https://www.testifysec.com/docs/cilock/attestors/jwt.md) - [k8smanifest attestor](https://www.testifysec.com/docs/cilock/attestors/k8smanifest.md) - [kube-bench attestor](https://www.testifysec.com/docs/cilock/attestors/kube-bench.md) - [link attestor](https://www.testifysec.com/docs/cilock/attestors/link.md) - [linkerd-check attestor](https://www.testifysec.com/docs/cilock/attestors/linkerd-check.md) - [lockfiles attestor](https://www.testifysec.com/docs/cilock/attestors/lockfiles.md) - [material attestor](https://www.testifysec.com/docs/cilock/attestors/material.md) - [maven attestor](https://www.testifysec.com/docs/cilock/attestors/maven.md) - [oci attestor](https://www.testifysec.com/docs/cilock/attestors/oci.md) - [omnitrail attestor](https://www.testifysec.com/docs/cilock/attestors/omnitrail.md) - [oscap attestor](https://www.testifysec.com/docs/cilock/attestors/oscap.md) - [pip-install attestor](https://www.testifysec.com/docs/cilock/attestors/pip-install.md) - [policyverify attestor](https://www.testifysec.com/docs/cilock/attestors/policyverify.md) - [product attestor](https://www.testifysec.com/docs/cilock/attestors/product.md) - [prowler attestor](https://www.testifysec.com/docs/cilock/attestors/prowler.md) - [sarif attestor](https://www.testifysec.com/docs/cilock/attestors/sarif.md) - [sbom attestor](https://www.testifysec.com/docs/cilock/attestors/sbom.md) - [scubagoggles attestor](https://www.testifysec.com/docs/cilock/attestors/scubagoggles.md) - [secretscan attestor](https://www.testifysec.com/docs/cilock/attestors/secretscan.md) - [sinkhole-flows attestor](https://www.testifysec.com/docs/cilock/attestors/sinkhole-flows.md) - [slsa attestor](https://www.testifysec.com/docs/cilock/attestors/slsa.md) - [steampipe attestor](https://www.testifysec.com/docs/cilock/attestors/steampipe.md) - [structured-data attestor](https://www.testifysec.com/docs/cilock/attestors/structured-data.md) - [system-packages attestor](https://www.testifysec.com/docs/cilock/attestors/system-packages.md) - [test-results attestor](https://www.testifysec.com/docs/cilock/attestors/test-results.md) - [vex attestor](https://www.testifysec.com/docs/cilock/attestors/vex.md) - [vsa attestor](https://www.testifysec.com/docs/cilock/attestors/vsa.md) - [Attestations](https://www.testifysec.com/docs/cilock/concepts/attestations.md) - [Attestors](https://www.testifysec.com/docs/cilock/concepts/attestors.md) - [Auto-detection and default attestors](https://www.testifysec.com/docs/cilock/concepts/auto-detection-and-defaults.md) - [How CI/lock captures files](https://www.testifysec.com/docs/cilock/concepts/capture-modes.md) - [Dogfooding: how CI/lock secures its own release](https://www.testifysec.com/docs/cilock/concepts/dogfooding-cilock-releases.md) - [DSSE & in-toto](https://www.testifysec.com/docs/cilock/concepts/dsse-and-in-toto.md) - [Evidence storage](https://www.testifysec.com/docs/cilock/concepts/evidence-storage.md) - [Inclusion proofs](https://www.testifysec.com/docs/cilock/concepts/inclusion-proofs.md) - [Merkle trees](https://www.testifysec.com/docs/cilock/concepts/merkle-trees.md) - [Policy verification](https://www.testifysec.com/docs/cilock/concepts/policy-verification.md) - [SCITT relationship](https://www.testifysec.com/docs/cilock/concepts/scitt-relationship.md) - [Signing & identity](https://www.testifysec.com/docs/cilock/concepts/signing-and-identity.md) - [Step categories and --step inference](https://www.testifysec.com/docs/cilock/concepts/step-categories.md) - [The spine of the graph](https://www.testifysec.com/docs/cilock/concepts/the-spine-of-the-graph.md) - [Timestamping](https://www.testifysec.com/docs/cilock/concepts/timestamping.md) - [Trust model](https://www.testifysec.com/docs/cilock/concepts/trust-model.md) - [CI/lock and Archivista](https://www.testifysec.com/docs/cilock/ecosystem/archivista.md) - [CI/lock and cosign](https://www.testifysec.com/docs/cilock/ecosystem/cosign.md) - [CI/lock and rookery](https://www.testifysec.com/docs/cilock/ecosystem/rookery.md) - [Connect CI/lock to the TestifySec platform](https://www.testifysec.com/docs/cilock/ecosystem/testifysec-platform.md) - [CI/lock and Witness](https://www.testifysec.com/docs/cilock/ecosystem/witness.md) - [Frequently asked questions](https://www.testifysec.com/docs/cilock/faq.md) - [Connect to the platform](https://www.testifysec.com/docs/cilock/getting-started/connect-to-the-platform.md) - [Your first attestation](https://www.testifysec.com/docs/cilock/getting-started/first-attestation.md) - [Installation](https://www.testifysec.com/docs/cilock/getting-started/installation.md) - [CI quickstart](https://www.testifysec.com/docs/cilock/getting-started/quickstart-ci.md) - [Verify a release offline (no platform needed)](https://www.testifysec.com/docs/cilock/getting-started/verify-a-release-offline.md) - [Verify the cilock binary](https://www.testifysec.com/docs/cilock/getting-started/verify-the-cilock-binary.md) - [Add a custom attestor](https://www.testifysec.com/docs/cilock/guides/add-a-custom-attestor.md) - [Build a custom cilock binary](https://www.testifysec.com/docs/cilock/guides/build-a-custom-cilock.md) - [How to choose a signer](https://www.testifysec.com/docs/cilock/guides/choose-a-signer.md) - [High-assurance attestation (zero-drop mode)](https://www.testifysec.com/docs/cilock/guides/high-assurance-attestation.md) - [Set up a supported level](https://www.testifysec.com/docs/cilock/guides/reach-a-supported-level.md) - [Store attestations in Archivista](https://www.testifysec.com/docs/cilock/guides/store-attestations-in-archivista.md) - [Verify a specific file](https://www.testifysec.com/docs/cilock/guides/verify-a-specific-file.md) - [Verify in a release gate](https://www.testifysec.com/docs/cilock/guides/verify-in-a-release-gate.md) - [What is CI/lock?](https://www.testifysec.com/docs/cilock/intro.md) - [Attestor catalog](https://www.testifysec.com/docs/cilock/reference/attestor-catalog.md) - [cilock CLI reference](https://www.testifysec.com/docs/cilock/reference/cli.md) - [Compatibility](https://www.testifysec.com/docs/cilock/reference/compatibility.md) - [Configuration](https://www.testifysec.com/docs/cilock/reference/configuration.md) - [aflock-ai/cilock-action reference](https://www.testifysec.com/docs/cilock/reference/github-action.md) - [CI/lock GitLab CI template reference](https://www.testifysec.com/docs/cilock/reference/gitlab-component.md) - [Platform PKI & trust](https://www.testifysec.com/docs/cilock/reference/platform-pki.md) - [Policy schema](https://www.testifysec.com/docs/cilock/reference/policy-schema.md) - [Standards guidance](https://www.testifysec.com/docs/cilock/reference/standards-guidance.md) - [Support matrix](https://www.testifysec.com/docs/concepts/support-matrix.md) - [checkov integration](https://www.testifysec.com/docs/cilock/tools/checkov.md) - [codeql integration](https://www.testifysec.com/docs/cilock/tools/codeql.md) - [Falco integration](https://www.testifysec.com/docs/cilock/tools/falco.md) - [gosec integration](https://www.testifysec.com/docs/cilock/tools/gosec.md) - [govulncheck integration](https://www.testifysec.com/docs/cilock/tools/govulncheck.md) - [grype integration](https://www.testifysec.com/docs/cilock/tools/grype.md) - [hadolint integration](https://www.testifysec.com/docs/cilock/tools/hadolint.md) - [Tools](https://www.testifysec.com/docs/cilock/tools.md) - [Chef InSpec integration](https://www.testifysec.com/docs/cilock/tools/inspec.md) - [kubescape integration](https://www.testifysec.com/docs/cilock/tools/kubescape.md) - [Linkerd integration](https://www.testifysec.com/docs/cilock/tools/linkerd.md) - [nuclei integration](https://www.testifysec.com/docs/cilock/tools/nuclei.md) - [OpenSCAP integration](https://www.testifysec.com/docs/cilock/tools/oscap.md) - [osv-scanner integration](https://www.testifysec.com/docs/cilock/tools/osv-scanner.md) - [Prowler integration](https://www.testifysec.com/docs/cilock/tools/prowler.md) - [semgrep integration](https://www.testifysec.com/docs/cilock/tools/semgrep.md) - [Steampipe integration](https://www.testifysec.com/docs/cilock/tools/steampipe.md) - [syft integration](https://www.testifysec.com/docs/cilock/tools/syft.md) - [testssl integration](https://www.testifysec.com/docs/cilock/tools/testssl.md) - [trivy integration](https://www.testifysec.com/docs/cilock/tools/trivy.md) - [zap integration](https://www.testifysec.com/docs/cilock/tools/zap.md) - [zarf integration](https://www.testifysec.com/docs/cilock/tools/zarf.md) - [Producing an audit evidence bundle](https://www.testifysec.com/docs/cilock/tutorials/audit-evidence-bundle.md) - [Defending against supply-chain attacks](https://www.testifysec.com/docs/cilock/tutorials/defending-against-supply-chain-attacks.md) - [GitHub Actions: from build to verified release](https://www.testifysec.com/docs/cilock/tutorials/github-actions-pipeline.md) - [GitLab CI: from build to verified release](https://www.testifysec.com/docs/cilock/tutorials/gitlab-ci-pipeline.md) - [A release promotion gate driven by CI/lock evidence](https://www.testifysec.com/docs/cilock/tutorials/release-promotion-gate.md) - [Capturing SBOM and SARIF as signed evidence](https://www.testifysec.com/docs/cilock/tutorials/sbom-and-sarif-evidence.md) - [Sign and verify a container image](https://www.testifysec.com/docs/cilock/tutorials/sign-and-verify-container.md) - [Signed compliance evidence (GRC)](https://www.testifysec.com/docs/cilock/use-cases/compliance-gate.md) - [Catch a compromised CI dependency](https://www.testifysec.com/docs/cilock/use-cases/credential-harvester.md) - [Use cases](https://www.testifysec.com/docs/cilock/use-cases.md) - [Rebuild a compromised package (internal supply chain)](https://www.testifysec.com/docs/cilock/use-cases/litellm-supply-chain.md) - [Release gates](https://www.testifysec.com/docs/cilock/use-cases/release-gates.md) - [Onboarding ceremonies](https://www.testifysec.com/docs/pushgate/ceremonies.md) - [Common errors](https://www.testifysec.com/docs/pushgate/common-errors.md) - [Pushgate.dev documentation](https://www.testifysec.com/docs/pushgate/setup.md) - [Trust architecture](https://www.testifysec.com/docs/pushgate/trust.md) - [Threat model](https://www.testifysec.com/docs/pushgate/trust/threat-model.md) - [ALPS 0.1: agent signing isolation](https://www.testifysec.com/docs/pushgate/agent-sandbox.md) - [Identity and keys](https://www.testifysec.com/docs/pushgate/trust/identity.md) - [Attestation evidence](https://www.testifysec.com/docs/pushgate/trust/evidence.md) - [Policy decisions](https://www.testifysec.com/docs/pushgate/trust/policy.md) - [Push verification](https://www.testifysec.com/docs/pushgate/trust/push.md) - [Verify independently](https://www.testifysec.com/docs/pushgate/trust/verify.md)