Skip to content

Commit 3f4f351

Browse files
authored
[docsy] Getting started: start headings at level 2 (#85)
Signed-off-by: Patrice Chalin <[email protected]>
1 parent c46bbac commit 3f4f351

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

content/en/docs/getting-started.md

+10-10
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ The layout, signed by the project owners, together with the links, signed by the
2323
designated functionaries, are released as part of the final product, and can be
2424
validated manually or via automated tooling in, e.g. a package manager.
2525

26-
### Installation
26+
## Installation
2727

2828
in-toto is available on [PyPI](https://pypi.org/project/in-toto/) and can be
2929
installed via [`pip`](https://pypi.org/project/pip/). See
@@ -35,9 +35,9 @@ recommendations.
3535
pip install in-toto
3636
```
3737

38-
### Create layout, run supply chain steps and verify final product
38+
Next you'll create a layout, run supply chain steps, and verify final product.
3939

40-
#### Layout
40+
## Layout
4141

4242
The in-toto software supply chain layout consists of the following parts:
4343

@@ -61,7 +61,7 @@ Take a look at the
6161
[demo layout creation example](https://in-toto.readthedocs.io/en/latest/layout-creation-example.html)
6262
for further information on how to create an in-toto layout.
6363

64-
#### Artifact Rules
64+
## Artifact Rules
6565

6666
A software supply chain usually operates on a set of files, such as source code,
6767
executables, packages, or the like. in-toto calls these files artifacts. A
@@ -101,9 +101,9 @@ types, their guarantees and how they are applied, take a look at the
101101
[Artifact Rules](https://github.com/in-toto/docs/blob/master/in-toto-spec.md#433-artifact-rules)
102102
section of the in-toto specification.
103103

104-
#### Carrying out software supply chain steps
104+
## Supply-chain steps
105105

106-
##### in-toto-run
106+
### in-toto-run
107107

108108
`in-toto-run` is used to execute a step in the software supply chain. This can
109109
be anything relevant to the project such as tagging a release with `git`,
@@ -127,7 +127,7 @@ For a detailed list of all the command line arguments, run `in-toto-run --help`
127127
or look at the
128128
[online documentation](https://in-toto.readthedocs.io/en/latest/command-line-tools/in-toto-run.html).
129129

130-
##### in-toto-record
130+
### in-toto-record
131131

132132
`in-toto-record` works similar to `in-toto-run` but can be used for multi-part
133133
software supply chain steps, i.e. steps that are not carried out by a single
@@ -139,12 +139,12 @@ arguments and their usage, run `in-toto-record start --help` or
139139
`in-toto-record stop --help`, or look at the
140140
[online documentation](https://in-toto.readthedocs.io/en/latest/command-line-tools/in-toto-record.html).
141141

142-
#### Release final product
142+
## Release final product
143143

144144
In order to verify the final product with in-toto, the verifier must have access
145145
to the layout, the `*.link` files, and the project owner's public key(s).
146146

147-
#### Verification
147+
## Verification
148148

149149
Use `in-toto-verify` on the final product to verify that
150150

@@ -159,7 +159,7 @@ For a detailed list of all command line arguments and their usage, run
159159
`in-toto-verify --help` or look at the
160160
[online documentation](https://in-toto.readthedocs.io/en/latest/command-line-tools/in-toto-verify.html).
161161

162-
#### Signatures
162+
## Signatures
163163

164164
`in-toto-sign` is a metadata signature helper tool to add, replace, and verify
165165
signatures within in-toto Link or Layout metadata, with options to:

0 commit comments

Comments
 (0)