Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Handle update to goreleaser v2 #86

Merged
merged 2 commits into from
Jun 14, 2024

Do no specify latest version in goreleaser-action

48c15bb
Select commit
Loading
Failed to load commit list.
Merged

Handle update to goreleaser v2 #86

Do no specify latest version in goreleaser-action
48c15bb
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded Jun 14, 2024 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377482248476983220954912983232767101915876321398 (0x421ee3b28d0c810995d98811f36290b57d546876)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Jun 14 17:20:45 2024 UTC
            Not After : Jun 14 17:30:45 2024 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    50:17:ce:fb:fd:18:fc:6d:1d:0b:06:04:ed:73:8a:
                    55:3a:83:d4:83:b3:36:19:c1:21:75:2a:8f:e4:d7:
                    d4:af
                Y:
                    8e:d6:d0:ff:ea:9e:d1:bb:5b:51:3f:e8:b4:0e:ae:
                    2b:49:2d:a6:2b:60:54:40:92:30:8b:ae:14:f2:d9:
                    aa:e5
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                40:90:84:B9:B4:0B:C6:6C:EB:B3:99:28:7A:AF:10:FA:0C:46:5B:43
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:github@i.m.mmlb.dev
            oidcIssuer:
                https://github.com/#/oauth
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABkBfEGGMAAAQDAEcwRQIgW2a7/5C7b9UaWQuA3zI3dcNQtV2ijPg8vJ1ygOcw2xcCIQDt3JZ+9aliXY5nOq/XKbPp17YATwzSvmtifIJTnNHUwQ==

    Signature Algorithm: ECDSA-SHA384
         30:65:02:31:00:e1:7c:a2:c1:48:95:af:18:88:d0:bf:24:d6:
         d5:92:55:8d:a0:31:1e:e1:78:7b:2b:2b:be:5b:36:99:db:9b:
         d7:8d:20:fb:d2:65:ac:34:d1:16:bc:78:49:25:7c:58:e6:02:
         30:0a:06:15:5a:27:a9:df:a9:77:a6:b6:73:e7:31:cd:34:60:
         15:91:c9:9d:f1:b9:5c:35:2a:5c:86:bd:6e:b6:fe:e7:9c:82:
         29:b4:44:0f:2c:44:9b:2c:02:db:69:93:78

Rekor Entry

{
  "body": "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",
  "integratedTime": 1718385924,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 102839360,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 2605736670972794746\n98677137\nVgmNwpyGlgSrTM/AlB6mtilhEC90J1QG6fJsWOBKBMc=\n\n— rekor.sigstore.dev wNI9ajBGAiEA/ASsR+kLaVFwh4Ot+R8BvrhZ1GkBCraH1SlK7A45UewCIQD01GherEIk0NizwuSKeQImBh+uwYhZ2f67cWHiNqctUw==\n",
      "hashes": [
        "8569e345ebb779c7effb1888678ea25e29204083f61422f07ddd1d20f0611486",
        "0c04e0631b90e29a9f69a7491eb2cb061c55db664e7c87f4445684245d1f9f95",
        "e2f2c9f4888fc0213522337ca45cfa90453eb07ce61e9363ddaea5538eda7d38",
        "aac4fe7c83a98e8e31aa71969be90b4a6c44a6b764dfad8e8d8150ac73aa9ef3",
        "2cc269304b59f1f5d65e664d14a5f6bd1e83c333caa47175f39a4390424b5209",
        "99eb932cdc4c1b320f846acad64f08208005d3efadfeaafc007d19b4f4f4658b",
        "d8c4ed589f39832991031c47dd910a69aecbd1bc95ad0865c927d900c4edc58a",
        "1612620a95c2e872f3b207535f527cd254b8100a4a0ee1ae21844ae752f4ce18",
        "c18ddadccb258211953ae2104391e6f009eac377fbebfd028f0da6d913919c45",
        "7a2e8c788e25f0d9adc8f28ed0f5ac334546af9097defc8d99e2fddd35a12d1b",
        "e231a7e8a53ed58ca687531047bf9b6d4b7fd29ceeaa6edcfb75d0a668e7dad4",
        "6383ca637e4e6ef07aeb18b5483e7644792cf1d5db875d6855d28d7a2d153362",
        "300315763e1a6e0ba3652971d3c9155d84cacff2ab0072b58c05f296841a71bf",
        "6e5a7b9ea3826ac6453fc351ff0c05b229c712b3886a64a5a156fc51ae1edeff",
        "e5c189d6863c13491c487c96a9781bc41dec1756423dbdceb2a48b98e453008b",
        "c36b01e5f32a6f697d18a6a372ba1152294e75b7b9365e4e4a80f8d1b85cb31f",
        "67d0987c7430ac30d3a0458c779e5d7237e6220b4c23a15ef3afc767ba9b74ad",
        "b75debb2b9a3e6c6cc958f10304053a157546467897fb001cc6a83732d24b708",
        "717dc0831fa13faeadd592db5ffc876df8d4e3aff79bf540996c86fdf8710157",
        "b23a2193fdc34087d74e07ffe57a70b5d17bc8d6eb7fc63290e307af50b20584",
        "f7c7a7ccc682fb1e6808cbc8650039cfcbeed9aa4330216f13ff77e4d7ee3f0f"
      ],
      "logIndex": 98675929,
      "rootHash": "56098dc29c869604ab4ccfc0941ea6b62961102f74275406e9f26c58e04a04c7",
      "treeSize": 98677137
    },
    "signedEntryTimestamp": "MEQCIEU7QLlWiMKLUvrWDMaeYES++UXmNkS55cRLKIi0hHyOAiAUp73Tuso3AANScIReqCD0+rtLgricyMQqxLh7GKez1w=="
  }
}