Yes, PDF/A (when combined with a digital signature such as PAdES) looks to be ideal in creating long-term tamper-resistant artifacts such as release notes or test reports in CI pipelines.

I found the PDF/A documentation and tried giving it a shot; however it looks like it only works with the ConTeXt engine, and the pandoc docker images only come with LaTeX.

I might have to take a diversion and look into docker ;)

Many thanks,

    - Malcolm

On Tuesday, May 9, 2023 at 6:52:19 AM UTC-4 Stephan Meijer wrote:
With digitally signed, do you mean PDF/A?

Pandoc has some info about it on their FAQ: https://pandoc.org/faqs.html#how-can-i-produce-pdfa-with-pandoc

Hope I was of any help.

Stephan

On Tuesday, 2 May 2023 at 00:42:57 UTC+2 Malcolm Nixon wrote:
Greetings all,

I'm looking to use Pandoc to generate digitally-signed PDFs from a CI workflow - specifically the digital signature would be evidence that the document hasn't been tampered with.

While the underlying Miktek PDF generator has a "digsig" package, it looks like Pandoc doesn't have any command-line options for triggering the signing of the output.

Am I missing something in the documentation (such as some means of specifying custom miktek extensions). 

Many thanks,
 - Malcolm

--
You received this message because you are subscribed to the Google Groups "pandoc-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pandoc-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org.
To view this discussion on the web visit https://groups.google.com/d/msgid/pandoc-discuss/73c2358c-ef08-411f-94e7-0d55e14b29b7n%40googlegroups.com.