Skip to content

Linter fixes

1bd79e8
Select commit
Loading
Failed to load commit list.
Draft

feat: record git cherry-picks in SBOMs #2221

Linter fixes
1bd79e8
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded Dec 1, 2025 in 0s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624789658676058991237087749550803224115986787688 (0x6d70898990923c820936d82f05db9c7026636d68)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Nov 7 12:58:17 2025 UTC
            Not After : Nov 7 13:08:17 2025 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    5b:d5:b7:b4:b7:b8:14:4f:06:a9:6d:b7:4d:bf:4a:
                    9f:ce:ef:34:aa:fb:3a:d4:ff:25:dc:0c:a7:c0:b1:
                    d7:85
                Y:
                    54:3a:92:e9:a1:49:01:ed:ca:06:b0:6f:f0:c5:81:
                    26:77:cb:49:d6:9f:e2:1d:9b:e7:93:b7:61:62:c1:
                    e8:cb
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                57:A3:05:8E:95:BC:80:9B:6D:06:00:5E:63:40:4E:E6:AB:1C:25:92
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:lukasz.zemczak@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABml5lcd0AAAQDAEcwRQIgaTg+WFkES7yV+7RcGuCA/wP6MV//7wKjahyKToywKCsCIQDMu1o2xwwxOW4U97fBDQ1xtKl9vsCz1uHpV0x+sRQ9pA==

    Signature Algorithm: ECDSA-SHA384
         30:66:02:31:00:b6:fb:0e:0f:2d:46:61:d1:9e:e5:cc:39:d4:
         28:99:a6:48:11:de:41:75:19:b3:7a:c2:e8:29:f5:8f:ce:c6:
         3e:61:49:8d:ca:b9:a4:21:ba:a4:4e:d0:2d:9e:c9:08:ea:02:
         31:00:a2:74:db:10:f5:33:b7:14:0d:24:c6:72:d7:a5:49:3d:
         71:fd:fd:82:27:06:55:0b:ad:81:fd:9c:0f:8d:93:63:5d:89:
         a2:9c:1f:6a:b3:54:56:6c:f5:7c:17:e3:19:3a

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1762520298,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 681482263,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n610787188\nldkn3qHeG9UBQsblWhl/AxY2uaNUB/R1YFak7+gKV38=\n\n— rekor.sigstore.dev wNI9ajBGAiEAsCBh+oCDtZY40MtvtBRqcIDjTlD6YO93a/q6pCjYwk4CIQCai4BpLIagCMocVQd2Ns4IZkZsyKB+xRVp32KlgYSuPQ==\n",
      "hashes": [
        "c69516acf866be4cac7342481a0f7217c994589c2b0fe9ce8da2f084d650bb4a",
        "3a01eeab628452cf15dabdb1199f0e28a07e10cf233dd6214be539415b067c2b",
        "38332ce1da9d82588b2394e08cb18741f5c6ff88a33cace6d3a3cfcfbd12e31d",
        "ad990d2f4d7441a0038f2bfd0af77de84b2294cd853a571dfc3b8b6841d94e2c",
        "d806be330bb5a74f5f78a21e0ee9f07b1a9c48f4adc8979108f96645cf89df5c",
        "6762e4847d6c403d897163fc01358d89e28701fd5ae53f05abcd60e979f62d78",
        "45c4a97cce75007bc2f487391c85d9e0d794b52b0f01219d1eb5e4c906073ee2",
        "d44989fd27a3a928b2df5c3eefd6fa999e8ec3ed4da60fb028e243cab29bd0ed",
        "2e6946ab81a56234bdc9d5a6632f22d27fa9513b04f165d7a919ed84279050b0",
        "8a3e74bb10b6044c45137cea2667684a71cfa86a3bdaefe0dc25f813095988e2",
        "26f7a55a96746895dc32fb93dac17f167dcdfafb8b8989a4183639519bed69c1",
        "d014401cfb5c62a72a80754b97abee5c7fe2bb453e20e814a7445a53a6e8f096",
        "85451ca12134359a6b0e315ddae51ce9910e8947feb9756e75b33a1130028417",
        "ea95b6a63b1e0cd26f50e1c7caa4748e4271a1220babc682627cd083e151eff4",
        "61acbb4646de9bc423177bf0658541102274467f50433fd0b21ac9af9f87c068",
        "20fc615d2ed371541199dd277c3707a2c1928cc896695936ff78a5c37746e282",
        "4535013ad5bfd3048fb5aef8895f774547b8c8bab26bd649bd32e65e8456cf87",
        "f5bdcef53071096ea5f0505dcc9392b228a8452822cdcf1e0fde828c8cf2bff8",
        "dd80faff50d5972b8b103489de9f86e453ae4a31f2fbb776238678b111dba485",
        "7118bdca70287b5dc071fd2123ee6b402539e6ea5211b73d6b99fc62dda78d9f",
        "b15739136a81951c8e603dc0adff3c4de32a170eca73e0a743ac9bbe7848f605",
        "558236e38004d3d07f5f549df80adc1370e8d1c54f7c079e9734a2ef35884a0d",
        "edb3ee79838b1e3e816821737ff73504f4a2df7b69620fdfc342899fb89dce98",
        "40c3f67a548d0dfe0307c98186c02f8030afd3df6328fbddc204748282f545b2",
        "94979e354cec08966b9a35599340ed49afced24de4fd92d4b1596377784c9ea0",
        "30f805fb00d5dbc1c00d2d60dfdd0f52ed369ba357f6a4d7fb4d00dad0e3c1e9",
        "28e901c26fa9760d5539f66a46e853d837428cd43c300e087677ee215b75474c",
        "4f80ea583e36840b4dfaf5fc8ca096aa80b899e13825e908f4bc5818270fcb53"
      ],
      "logIndex": 559578001,
      "rootHash": "95d927dea1de1bd50142c6e55a197f031636b9a35407f4756056a4efe80a577f",
      "treeSize": 610787188
    },
    "signedEntryTimestamp": "MEUCIHx1MeZ3WPvjruitbideUmsV3kKsdhwGZGplWFfGNi2hAiEAiVwSi8D1MxFHXD3P0Tjjsrh7W77UgJcrboMfiPLn/Go="
  }
}