From 82abf7d874ddadb29426eecaa620c24e1bec038e Mon Sep 17 00:00:00 2001 From: Knugi <24708955+KnugiHK@users.noreply.github.com> Date: Fri, 2 Jan 2026 04:53:52 +0000 Subject: [PATCH] Add Verifying Build Integrity section --- README.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/README.md b/README.md index 3566b9f..0c40a39 100644 --- a/README.md +++ b/README.md @@ -258,10 +258,34 @@ WhatsApp Chat Exporter: 0.13.0rc1 Licensed with MIT. See https://wts.knugi.dev/d licenses. ``` +## Verifying Build Integrity + +To ensure that the binaries provided in the releases were built directly from this source code via GitHub Actions and have not been tampered with, GitHub Artifact Attestations is used. You can verify the authenticity of any pre-built binaries (starting from the release 0.13.0rc1) using the GitHub CLI. + +### Using Bash (Linux/WSL/macOS) + +```bash +for file in wtsexporter*; do + gh attestation verify "$file" -R KnugiHK/WhatsApp-Chat-Exporter +done +``` + +### Using PowerShell (Windows) + +```powershell +$files = Get-ChildItem -Path "wtsexporter*" + +foreach ($file in $files) { + gh attestation verify "$($file.FullName)" -R KnugiHK/WhatsApp-Chat-Exporter +} +``` + + # Python Support Policy This project officially supports all non-EOL (End-of-Life) versions of Python. Once a Python version reaches EOL, it is dropped in the next release. See [Python's EOL Schedule](https://devguide.python.org/versions/). + # Legal Stuff & Disclaimer This is a MIT licensed project.