GitLab CI

Use the matrixscroll CLI in a GitLab job to verify commit envelopes on merge requests.

verify-provenance:
  image: python:3.12-slim
  rules:
    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
  variables:
    GIT_DEPTH: "0"
  script:
    - pip install "matrixscroll==0.6.0"
    - git fetch origin refs/notes/matrixscroll:refs/notes/matrixscroll || true
    - matrixscroll envelope-verify-range --base origin/$CI_MERGE_REQUEST_TARGET_BRANCH_NAME --head $CI_COMMIT_SHA --source notes

Publish envelopes to refs/notes/matrixscroll before review. Same envelope contract as GitHub Actions.

Back to /try · Git quickstart