Yes, PDF/A (when combined with a digital signature such as PAdES) looks to 
be ideal in creating long-term tamper-resistant artifacts such as release 
notes or test reports in CI pipelines.

I found the PDF/A documentation and tried giving it a shot; however it 
looks like it only works with the ConTeXt engine, and the pandoc docker 
images only come with LaTeX.

I might have to take a diversion and look into docker ;)

Many thanks,

    - Malcolm

On Tuesday, May 9, 2023 at 6:52:19 AM UTC-4 Stephan Meijer wrote:

> With digitally signed, do you mean PDF/A?
>
> Pandoc has some info about it on their FAQ: 
> https://pandoc.org/faqs.html#how-can-i-produce-pdfa-with-pandoc
>
> Hope I was of any help.
>
> Stephan
>
> On Tuesday, 2 May 2023 at 00:42:57 UTC+2 Malcolm Nixon wrote:
>
>> Greetings all,
>>
>> I'm looking to use Pandoc to generate digitally-signed PDFs from a CI 
>> workflow - specifically the digital signature would be evidence that the 
>> document hasn't been tampered with.
>>
>> While the underlying Miktek PDF generator has a "digsig" package, it 
>> looks like Pandoc doesn't have any command-line options for triggering the 
>> signing of the output.
>>
>> Am I missing something in the documentation (such as some means of 
>> specifying custom miktek extensions). 
>>
>> Many thanks,
>>  - Malcolm
>>
>

-- 
You received this message because you are subscribed to the Google Groups "pandoc-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pandoc-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org
To view this discussion on the web visit https://groups.google.com/d/msgid/pandoc-discuss/73c2358c-ef08-411f-94e7-0d55e14b29b7n%40googlegroups.com.