skills.rest
doolin
doolinCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

solana-cicd-hash

Create on-chain Solana memo attestations for GitHub Actions build artifacts.

Updated Mar 29, 2026
Search Tags:#pdf#s3#cicd#memo#on-chain#solana#attestation
One-click install
npx skills add https://github.com/doolin/dave-skills --skill solana-cicd-hash
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: solana-cicd-hash
Source: https://github.com/doolin/dave-skills/tree/main/skills/solana-cicd-hash
Command: npx skills add https://github.com/doolin/dave-skills --skill solana-cicd-hash

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @solana/web3.js, archiver, pdfkit, ed25519, and includes scripts (resource) components.

What problem does it solve?

Create a tamper-proof, on-chain record that a CI/CD pipeline ran for a specific commit and what it produced. The attestation runs as its own GitHub Actions job after check/test jobs complete, on main pushes only.

Core Features & Use Cases

  • Zips CI artifacts, computes a SHA-256 checksum, anchors the hash on Solana via a memo, generates a PDF attestation, and optionally uploads artifacts to S3 for compliance records.
  • Provides a verifiable, auditable trail linking commits to build outputs, enabling lightweight governance and vendor audits.
  • Supports Node and Ruby implementations for cross-project adoption; can be extended with repo-specific pipelines by copying scripts/attest.mjs or scripts/attest.rb into the target repo.

Quick Start

Copy scripts/attest.mjs (or scripts/attest.rb) into the target repo and wire it into a GitHub Actions workflow to run the attestation.

Frequently Asked Questions about solana-cicd-hash

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an on-chain attestation for CI/CD build artifacts on Solana?▼

You must provide a Solana keypair in your repository secrets to sign memo transactions for anchoring the attestation hash on-chain. AWS credentials are also required if you choose to upload artifacts to S3 for compliance records.

What is the purpose of anchoring a CI/CD hash on the Solana blockchain?▼

Anchoring a CI/CD hash on Solana creates a tamper-proof, auditable record linking a specific commit SHA to its build outputs. This provides lightweight governance and vendor audits with verifiable proof of pipeline execution.

Can I generate a PDF attestation for GitHub Actions pipeline runs on the main branch?▼

Yes, the skill generates a downloadable PDF attestation containing the build details and checksum when the GitHub Actions pipeline runs on the main branch. This PDF serves as a compliance record for the verified build artifacts.

Does this Solana attestation skill support both Node and Ruby implementations?▼

Yes, the skill provides cross-project adoption support by offering both Node (attest.mjs) and Ruby (attest.rb) scripts. You can copy either implementation into your target repository to handle archiving, hashing, and memo posting.

Related Skills

Explore More Software Engineering Skills→
adaptive-enforcement-labadaptive-enforcement-lab
3

action-pinning-overview

Pin GitHub Actions to SHA-256 commits in CI/CD workflows.

Official
Advanced
a-ng-da-ng-d
1

glab-attestation

Validate GitLab attestations for artifact provenance and integrity.

Community
Intermediate
Dargon789Dargon789
3

appkit

Integrate web3 wallet connections, transactions, and authentication across web frameworks.

Community
Advanced
doolindoolin

inventium-cicd-pipeline

Automate three-phase check, attest, and deploy CI/CD pipelines for Inventium repos.

Community
Intermediate