Add support for gzip-compressed CPIO output#2253
Merged
codysoyland merged 4 commits intoJun 29, 2026
Merged
Chainguard Guardener / Enforce - Commit Signing
succeeded
Jun 29, 2026 in 0s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203055238367490593376379613044767725358429485655 (0x23914fd203bfcece6585d07db7716cc88f8fba57)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Jun 29 16:29:41 2026 UTC
Not After : Jun 29 16:39:41 2026 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
34:ad:9c:11:df:fb:b3:88:27:2c:c6:f2:7f:7b:c1:
50:58:89:69:d7:f9:91:cb:24:e3:3f:6c:11:08:7c:
2e:5f
Y:
1c:44:f6:66:52:24:a0:65:d7:40:3b:c4:10:dc:bd:
89:5d:72:0b:de:8f:79:f2:2b:06:4d:e9:19:fa:aa:
46:4b
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
28:69:DB:9F:92:6D:3F:B6:77:44:5C:C3:6F:AB:D3:1B:3D:63:72:89
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:lvishpal408@gmail.com
oidcIssuer:
https://github.com/login/oauth
Unknown extension 1.3.6.1.4.1.57264.1.8
Unknown extension 1.3.6.1.4.1.57264.1.24
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABnxQ3EtoAAAQDAEcwRQIhANJSzTUr3ElqoRt3h2iq+PRDL4ubvHPCpyByOCFU2cxGAiAiz4p5XRARq5dbWbUCA+qOLv/1qpklahgC5+39N/8awg==
Signature Algorithm: ECDSA-SHA384
30:65:02:31:00:fa:1d:70:12:ea:dd:a8:16:19:74:5e:e3:81:
fa:48:c6:fe:06:47:56:54:a6:f9:a5:3b:95:d6:94:d8:c6:23:
78:5f:c6:c1:e1:93:98:a1:f0:30:80:9c:42:66:5e:01:a4:02:
30:6b:c8:03:63:1c:85:14:dc:64:1e:2e:ba:bd:8c:16:01:68:
55:56:e4:f4:61:49:b3:0b:79:39:e8:eb:32:81:8d:e7:92:f4:
1e:b8:7b:ca:f5:39:9f:bc:08:6f:c9:75:4a
Rekor Entry
Details
{
"body": "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",
"integratedTime": 1782750582,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 2010970355,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1890392054\neyRv+jMDDiipnzmTYMr31sf9BUV9hGm1mhRGsryOOfE=\n\n— rekor.sigstore.dev wNI9ajBFAiEAgG4LXOqHvPO7MxjLxmBpzsXjGZkk4DN5UzQkqpwJ6RoCIAF3jv0mLmh/9Dw5Lh54EUMI0mBOxrdpw00zsVRa05rf\n",
"hashes": [
"cbc9db28fb61180facc7559f2f445bdaca2003abcded4a11d85ef3f889cc6f42",
"6c20a809abb312b1db03dd11c77bf698cb710e96c6ccae0c67a5d992ae867cb4",
"8dbf64a060b9a08e644a00fcba1c12c205e8e7ca1f153bbdb1bf346b126055dd",
"ed18d4c8afcb4b9563727b871b9e5cd9289a3bd8376b53778fcc88f1814bfee5",
"511175fd6ee9904a64eaa29e0024f85539b9fd16f4ac67cfe6c465c90a8d4385",
"822a3031422a6845e10f67008d62626e278c1b7e89f646f37d153aec01b4b731",
"d2600e52583c358f38feb4445ea1d350fd5baec50c08c8e02210d5aed86a91dc",
"8cc19ce63774d8ebc67a50e02aeb9ec817245bbf389235eb0abbae87212d6141",
"4ec16f74071be864f2eaf8cb8d27ee3266fde1752ed528db13f6cc6feee36cc3",
"ff8675d4ad5513662cb0b74274b078600e563c360689c340818f5b0eb48f973c",
"a11941c4167d13196d1751c06c7037497f64291dd6c63446bcac9cbced2d9aab",
"f84bbad50b3f85d1a205f6543af66ebd3042600a1784ca824a52663ce4ee8607",
"91de1b67b843985ae482b8faf9939b0e9e786fe70b40458f5144a4d2ff2a64f6",
"62e172130f39270414ad5faab6229b6b8de8a4f9a0755ec38d518327815e0e56",
"9d6d57b22f4211eb181c88672cc06339b0bc95f86e8f02738b60dcf65ff38139",
"7df0f15831a6ec190785220e2ce11661330c787946098cc33a4e6d2945dfa909",
"b23dec25bf2fcb47b58ab3aaa2a8a1623d35c8a9ab9b0138974c7df0b269ac1d",
"ded7db3b326480b1d5dd899f24f24be3f361912ea5239844f0e02a904c9d8228",
"09e4a932746081f4c51cf602d3971757f240696d1c369477ad546f9e082087dd",
"fa1844451d266ad89de4dbc793b75db0f396279240cb29f5d5ffabb99a4c5b7f",
"329d1b941ce4c708fa38602881534d34cc103385f1453142ac70f9659cb6c188",
"51dbb1224c3cfbde22bd6927291927b4baf581894d03ca0a98e29e9424246934",
"74805fb6c1ce5a15ad8bf73ba6e70f35f6a6b1337236e6a6dd5883c7aee4acb0",
"fbf559e7a32c20fc4c8b22c0a1dcca5e8e53116750a77eb3f3da8b869ce5a00a",
"75ac6665a6a3469655f89c4788e61984906248a379b9caa38765a719b1e18abc",
"0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
],
"logIndex": 1889066093,
"rootHash": "7b246ffa33030e28a99f399360caf7d6c7fd05457d8469b59a1446b2bc8e39f1",
"treeSize": 1890392054
},
"signedEntryTimestamp": "MEUCIH2U7XGlNxrnv3ix/dqhXQkv47BRP417Fn0ruUOLn2iFAiEA0U6PFgreqigoBdlS+gVNloMGgaVB3iHvz9dgSNM4hqk="
}
}
Loading