HALOWERKSicherwerk
provenance verify
Searches the Sigstore Rekor log for entries matching an artefact hash and returns what a provenance claim is actually worth: the log index and inclusion time, the signing identity from the certificate, and where available the source repository and workflow reference that produced it. Several entries for one hash are all returned, because a rebuild or a second signer is a fact worth seeing rather than collapsing.
POST https://sicher.halowerk.com/v1/provenance-verifyEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| sha256 | string | Nein | Artefact SHA-256, with or without the sha256: prefix. |
| log_index | integer | Nein | Fetch one specific log entry instead of searching. |
| string | Nein | Search by signer email instead of by hash. | |
| limit | integer | Nein | How many entries to detail. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"additionalProperties": false,
"properties": {
"sha256": {
"type": "string",
"minLength": 64,
"maxLength": 71,
"description": "Artefact SHA-256, with or without the sha256: prefix."
},
"log_index": {
"type": "integer",
"minimum": 0,
"description": "Fetch one specific log entry instead of searching."
},
"email": {
"type": "string",
"maxLength": 200,
"description": "Search by signer email instead of by hash."
},
"limit": {
"type": "integer",
"minimum": 1,
"maximum": 20,
"default": 5,
"description": "How many entries to detail."
}
}
}Veröffentlichtes Eingabebeispiel
{
"sha256": "a3f1c2d4e5b6978012345678901234567890abcdefabcdefabcdef1234567890"
}Ergebnis & Dokumentation
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Sicherwerk0,005 USDC
container inspect
POSThttps://sicher.halowerk.com/v1/container-inspectReads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and t
- Sicherwerk0,005 USDC
cve check
POSThttps://sicher.halowerk.com/v1/cve-checkQueries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and
- Sicherwerk0,005 USDC
hash reputation
POSThttps://sicher.halowerk.com/v1/hash-reputationQueries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict.