Skip to content
This repository has been archived by the owner on Mar 22, 2024. It is now read-only.

use wolfi packages, use wolfi-dev/sdk image #41

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

use wolfi packages, use wolfi-dev/sdk image

63c7799
Select commit
Loading
Failed to load commit list.
Open

use wolfi packages, use wolfi-dev/sdk image #41

use wolfi packages, use wolfi-dev/sdk image
63c7799
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded Sep 19, 2023 in 0s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585332412446460624632468446757540389320761809829 (0x6687369075c1d9da29e60babb52136cc49e01ba5)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Sep 19 15:23:51 2023 UTC
            Not After : Sep 19 15:33:51 2023 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    90:84:7e:cf:f8:1d:7a:1b:60:04:0e:97:e7:0d:ff:
                    7e:cf:e4:19:8c:c3:ed:ee:d1:b5:3a:23:4b:bd:22:
                    62:5c
                Y:
                    a1:26:17:17:39:e0:43:12:e8:99:16:5a:65:23:56:
                    c5:a4:b2:a8:4b:30:33:56:5d:f0:79:d3:98:82:9e:
                    ae:cd
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                F2:D5:46:3B:B2:99:DA:F5:76:9A:0E:42:18:99:5D:28:14:69:6F:F3
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:jason@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABiq4KZgwAAAQDAEcwRQIgTRmvv0TiQxYjc+B7+wefea5+WjZGs0cJxUqsYPIAvlACIQCY2gwZHhFewlVKXaHWtcF4uOr31cPvtQJnvO/os278oQ==

    Signature Algorithm: ECDSA-SHA384
         30:64:02:30:1d:64:9e:5e:a2:70:72:8e:65:54:cf:b6:5a:ff:
         f1:0f:12:bb:7d:da:a3:2b:ea:11:77:77:cc:ae:6f:c5:4d:cc:
         18:fe:f6:e4:e8:27:2f:2c:d8:e4:18:72:5e:aa:55:44:02:30:
         64:fb:ce:23:1a:34:f1:ac:02:18:c4:0a:73:a5:ed:a9:a9:6b:
         20:90:a9:52:14:92:8b:8b:21:c3:96:15:64:c4:06:56:7e:4f:
         b1:f9:ba:2b:47:6e:af:ed:e0:40:0d:a1

Rekor Entry

{
  "body": "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",
  "integratedTime": 1695137031,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 37321462,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 2605736670972794746\n33158080\nozzOt3aSPin4IZ0mhlUTejHPJPRJLDWxAnLIZgQTits=\nTimestamp: 1695137072841739571\n\n— rekor.sigstore.dev wNI9ajBGAiEA5grYu7YTt2RSSRcdB3/eH1edhRqcgVtBfWssFDj6DD4CIQDqDYhQRQejAE72nPbpcBtrhag8ZuEIpgCFAOkh9tmyhw==\n",
      "hashes": [
        "4ebbbf0e50e42ffa23b3ed960ce786f725c22f69efdcdb9bf4c174549e78cc1f",
        "28e04b16c2c234a835e55d4555275c9977a2aaae5955431fb61e6efb8c3a0d01",
        "c415daf632982bc5de77181801a39cb619b321f423ce6777478791bd3e426df4",
        "9e4a7eb3301034122d4732acb140dd656e9faba7ab63574fc021eba3646b6fd8",
        "c04a93c1a1730d3e33145cb36986d86aabf07b88407330a0ded0a0205eb7f4f4",
        "bee755fe2819bb4687797860a69b0e2073b5ad045ce366b84b4a1e349fcfb36f",
        "cd6c8cde91f9f350a246e62860a683425498eaeda8d111b1e0700788f84baafb",
        "fd10519337727ae92d71f3f33fdf716428b6bd04243c63c244273d205248381d",
        "32c550e2697ac36a11c3d3c5c052de62c47477a9f9495cf69bd7df9a6a7f202f",
        "942d2024a5a012b4d6ce0d8343d5ea0eaa2c8f1872e254e359d3d32b8759ae20",
        "aa103fe70b2fc96fcbf74e4b065b1b389e984764b716f71bfd7687b9a2e88b71",
        "7e7bd37f68c5eb88595b77bb3f713f6e49a72c2407b35a2c1b04d5454b3890ef",
        "46af79cedf1ce25d19d2c62e73ad38e0343978d1f65e01d64b435c59740edb5e",
        "4ec232a3c8a922a3cc37e0c0121bfff7879c25406feacc2c546e5bc331b5f235",
        "9dfcae986a3cd74657e2312f795fb4ef873528e3a74c3ce4ae4c11eb3ccf47d7",
        "02eb1d735b97301168d3851ae646a69e665eac470475bc59eec3760dc014fbd2",
        "634de5e8d3f48111fc55dc89c168d0593043c0e995c037fa23dc996cf984b4fd",
        "e2507f5f4824ff0063c417fdb8909d172fa4904e26cc87c781b5938ed3c2aa6a",
        "8d152ae03f0ef85238ed66f0f7ab3bc870aee2acd6531a4855fc5011ea6b0e67",
        "ad712c98424de0f1284d4f144b8a95b5d22c181d4c0a246518e7a9a220bdf643"
      ],
      "logIndex": 33158031,
      "rootHash": "a33cceb776923e29f8219d268655137a31cf24f4492c35b10272c86604138adb",
      "treeSize": 33158080
    },
    "signedEntryTimestamp": "MEUCICPM1o/pb0X0Yc7DNuk0K0vKoausu8oTRSS9bfFvFs+VAiEA9ns+K75Xgw6yfQ0IM/56YC6NJ6xFxm3SFuXL0lh6850="
  }
}