plugins:revoke-publisher
Locally revoke a trusted plugin publisher key.
Syntax#
vigil --allow-mutation plugins:revoke-publisher KEY_ID
Options#
| Flag | Description |
|---|
--json | Emit the versioned JSON envelope. |
--stream | Stream phase status as text or JSONL. |
--verbose | Stream additional phase details. |
Arguments#
| Name | Description |
|---|
KEY_ID | Trusted publisher key identifier. |
Examples#
vigil --allow-mutation plugins:revoke-publisher sha256:<digest>
Example Use Cases#
- Use this command when you need to locally revoke a trusted plugin publisher key.
- Preview or review the operation before allowing repository changes.
Technical Contract#
| Binding | builtin:plugins:revoke-publisher |
|---|
| Stability | stable |
|---|
| Timeout | 2m0s |
|---|
| Required tools | None |
|---|
| Capabilities | filesystem:read, filesystem:write |
|---|
| Output formats | text, json |
|---|