Skip to content

Commit 9d68393

Browse files
authored
Merge pull request #2642 from st3penta/improve-help-description
Improve CLI --help description
2 parents b39f875 + 59e7c25 commit 9d68393

File tree

2 files changed

+42
-2
lines changed

2 files changed

+42
-2
lines changed

cmd/root/root_cmd.go

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,27 @@ func NewRootCmd() *cobra.Command {
6363
Long: hd.Doc(`
6464
` + version.CliName() + ` CLI
6565
66-
Set of commands to help validate resources with the provided policies.
66+
Secure your software supply chain by validating that your artifacts meet security and
67+
compliance requirements. Conforma helps you verify the authenticity and integrity of
68+
container images, build processes, and deployment pipelines.
69+
70+
Whether you're ensuring images are properly signed, validating build attestations comply
71+
with your organization's policies, or checking that Tekton tasks follow security best
72+
practices, Conforma provides the tools you need to establish trust in your software
73+
delivery process.
74+
75+
Key capabilities:
76+
• Verify signatures and attestations on container images
77+
• Validate SLSA provenance to ensure secure build processes
78+
• Enforce compliance policies across your development workflow
79+
• Generate detailed reports for audit and compliance purposes
80+
• Support for custom validation rules to meet your specific requirements
81+
82+
Use Conforma to implement "trust but verify" practices in your CI/CD pipeline,
83+
ensuring that only secure, compliant artifacts make it to production.
84+
85+
Have feedback or want to contribute? Visit https://conforma.dev/contribute/ to join our
86+
community, report issues, or help improve Conforma.
6787
`),
6888

6989
SilenceUsage: true,

docs/modules/ROOT/pages/ec.adoc

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,27 @@ Conforma CLI
66

77
Conforma CLI
88

9-
Set of commands to help validate resources with the provided policies.
9+
Secure your software supply chain by validating that your artifacts meet security and
10+
compliance requirements. Conforma helps you verify the authenticity and integrity of
11+
container images, build processes, and deployment pipelines.
12+
13+
Whether you're ensuring images are properly signed, validating build attestations comply
14+
with your organization's policies, or checking that Tekton tasks follow security best
15+
practices, Conforma provides the tools you need to establish trust in your software
16+
delivery process.
17+
18+
Key capabilities:
19+
• Verify signatures and attestations on container images
20+
• Validate SLSA provenance to ensure secure build processes
21+
• Enforce compliance policies across your development workflow
22+
• Generate detailed reports for audit and compliance purposes
23+
• Support for custom validation rules to meet your specific requirements
24+
25+
Use Conforma to implement "trust but verify" practices in your CI/CD pipeline,
26+
ensuring that only secure, compliant artifacts make it to production.
27+
28+
Have feedback or want to contribute? Visit https://conforma.dev/contribute/ to join our
29+
community, report issues, or help improve Conforma.
1030

1131
[source,shell]
1232
----

0 commit comments

Comments
 (0)