license-check: also consider license-paths from the config #2351
+227
−2
Chainguard Enforce / Enforce - Commit Signing
succeeded
Feb 16, 2026 in 1s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374853934137466588135128148798875248809820737924 (0x41a90820e7bec27df79a8f8ef2e7ec4e15aad184)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Feb 16 14:09:00 2026 UTC
Not After : Feb 16 14:19:00 2026 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
6e:94:ff:ad:29:b6:bb:02:00:0b:cb:71:eb:45:7c:
45:1c:69:41:f3:68:00:38:f8:62:a8:45:3f:5a:ad:
29:b4
Y:
b3:72:61:c9:53:59:74:7f:a2:66:2c:33:ea:42:e3:
cc:45:6b:92:54:5b:3e:4a:27:77:35:b4:97:d8:9c:
1d:cd
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
4F:49:B9:40:46:DA:DC:39:B3:E3:79:47:04:A5:C2:11:AD:E2:5B:68
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:lukasz.zemczak@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABnGbIe18AAAQDAEYwRAIge4zJGLM5ddpSwaO6k7vpVXEvgNTaS/MJ9Vm3GY/7/0oCIELR4Pq47+PtXtoXfAyVnrdgu20XHUmQXkZzi8CCeGNK
Signature Algorithm: ECDSA-SHA384
30:65:02:30:46:b6:7a:e6:bf:cd:d7:6e:3c:21:9e:21:49:21:
ef:e4:b2:4d:87:61:8f:45:cd:48:73:e8:65:fe:b0:2a:c7:30:
37:4d:22:fb:71:ff:d3:24:f3:5e:5b:99:ed:31:d6:18:02:31:
00:fe:cb:c6:d0:8f:cb:4e:48:95:08:8d:f4:e2:0a:fa:29:b4:
86:e3:44:05:38:c4:77:24:fb:5c:95:90:4a:ca:9a:30:c4:a3:
f6:b5:60:64:11:ce:aa:c5:95:e4:ee:06:18
Rekor Entry
Details
{
"body": "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",
"integratedTime": 1771250941,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 954916710,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n833015386\nESCJiWRG63F6qQyubD0lVmLbKzMPlZNCvGzgpa6Ycyo=\n\n— rekor.sigstore.dev wNI9ajBGAiEAtS0dUsfJkzuqQkkL7YrsuhOCiaYA5NaocAa7w/A8OA8CIQCaoCiiCWvKoEMJm9zo5T0Ecktf1Y1Ya6ZOC+Myi8c1Vw==\n",
"hashes": [
"2a271cc613c5022e3e3c2a882425044a0431c20d079fd6f35e9fe24af087da30",
"3349c4a02deb198e3522ac5ff18e02ed15539ba249ecc80e5d52a1bc28ba5afb",
"b2fc42074916195f6754fe3de275a5e65e1b9f43cdad3bf814a75a298f31cf6a",
"6d8a43159270087f16e0bda0ba950b4ce3a3ec068144f003c6da3f361dc25b9a",
"61bcf15392be4ecea6830a068b10b7c4330b204d4c91c421e1bcc3239d96affc",
"425bed4f566274194733ea4abc8911fb78daf54acf2d176076aebf3162566908",
"87e39fce68aa605fcce1af131cf9cb5d48108795e01801ca160d14b74473866b",
"204e689da111b2cf4d7f789d3aa2672d47e179c77070a690199571d981c0e36c",
"7aebca0e60535f97ce7019e6db893abc40450dbe230887972a8dc82fe4210788",
"071e7ee7c3af95e2ab7eb418efd4aa6766cca8a59fa367c205cd09d462259946",
"44fea0c2da25de5dfa4d6da7aa45414687fc8f68a25ffb3e645ad56157031286",
"f00efffaf844172d4324daa23f2d9c69f5b7ce30006c189f3ac10509ae0fab70",
"3efb812408850f610af43731765ec646fafed0b533bbc3ffaaac5fce967c0373",
"46423131aecbb311b77ea2ebd58c866f90cadf0a9bb9c832463c7fcbc76de77c",
"7b62da1c07d8e687aed5007ce2c85e3b20c52cf2e7fe4dcfad23855ce3ed6cd3",
"436a7eb039880eb21a87b15a8b30e0e61a3e2de6659b3b7836f4465cd71ab3d4",
"03234c803ecccdd1a2f840fb5e110dd1b8c3a0294a575c1c3fc2d567816b9041",
"04c6cd5abe41fe784b1f59519f7562f5791bc74d1e0858e515592405f8bfb505",
"55727a97cd3e24d6b9c60affc9e860197ac17adcd8d2c75e1eb16dc7436c005c",
"7cb02f138e8da82555f3a129076a4a9302651638c593b9ed5f7942f8f899b88a",
"4f80ea583e36840b4dfaf5fc8ca096aa80b899e13825e908f4bc5818270fcb53"
],
"logIndex": 833012448,
"rootHash": "112089896446eb717aa90cae6c3d255662db2b330f959342bc6ce0a5ae98732a",
"treeSize": 833015386
},
"signedEntryTimestamp": "MEUCID2m+4xZaJFRrqonOsrCrIDZrHLIC52UCqwrwjA3D7mbAiEAppi0cKqcmodKMZqu9uEGaicOBbx1L7ULEwMItFPsRdw="
}
}
Loading