From 5d0ec49da8faece2628cfbb29c32a17654282db1 Mon Sep 17 00:00:00 2001
From: brian d foy <briandfoy@pobox.com>
Date: Thu, 2 Jan 2025 15:08:40 -0500
Subject: [PATCH] backup repos and GitHub Attestations in README

---
 README.pod | 27 +++++++++++++++++++++------
 1 file changed, 21 insertions(+), 6 deletions(-)

diff --git a/README.pod b/README.pod
index d0f6eac..ad7270d 100644
--- a/README.pod
+++ b/README.pod
@@ -76,20 +76,35 @@ I<Makefile.PL> or the I<META.*> files it creates. You can find that on
 those CPAN web interfaces, but you can also look at files directly in
 the source repository:
 
+If you find a problem, file a ticket in the L<issue
+tracker|https://github.com/briandfoy/antsy/issues>.
+
+There are also backup repositories hosted on other services. These
+reflect the state of the main repo and exist only for redundancy:
+
 =over 4
 
-=item *	L<https://github.com/briandfoy/antsy>
+=item * L<https://bitbucket.com/briandfoy/antsy>
+
+=item * L<https://gitlab.com/briandfoy/antsy>
+
+=item * L<https://codeberg.org/briandfoy/antsy>
 
 =back
 
-If you find a problem, file a ticket in the L<issue
-tracker|https://github.com/briandfoy/antsy/issues>:
+=head2 GitHub Attestations
 
-=over 4
+This distribution now uses
+L<GitHub Attestations|https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/>,
+which allow you to verify that the archive file you have was made from
+the official repo.
 
-=item *	L<https://github.com/briandfoy/antsy/issues>
+You need a GitHub account and the L<gh tool|https://github.com/larsks/ghcli>.
 
-=back
+	# download the distro file from GitHub, MetaCPAN, or a CPAN mirror
+	$ gh auth login
+	...follow instructions...
+	$ gh attestation verify Antsy-1.23.tar.gz --owner briandfoy
 
 =head2 Getting help