Skip to content

Add support for gzip-compressed CPIO output#2253

Merged
codysoyland merged 4 commits into
chainguard-dev:mainfrom
lavishpal:build-cpio-gzip-support
Jun 29, 2026
Merged

Add support for gzip-compressed CPIO output#2253
codysoyland merged 4 commits into
chainguard-dev:mainfrom
lavishpal:build-cpio-gzip-support

rename the file name from build-cpio.go to build_cpio.go

e173a2b
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Jun 29, 2026 in 0s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203055238367490593376379613044767725358429485655 (0x23914fd203bfcece6585d07db7716cc88f8fba57)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Jun 29 16:29:41 2026 UTC
            Not After : Jun 29 16:39:41 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    34:ad:9c:11:df:fb:b3:88:27:2c:c6:f2:7f:7b:c1:
                    50:58:89:69:d7:f9:91:cb:24:e3:3f:6c:11:08:7c:
                    2e:5f
                Y:
                    1c:44:f6:66:52:24:a0:65:d7:40:3b:c4:10:dc:bd:
                    89:5d:72:0b:de:8f:79:f2:2b:06:4d:e9:19:fa:aa:
                    46:4b
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                28:69:DB:9F:92:6D:3F:B6:77:44:5C:C3:6F:AB:D3:1B:3D:63:72:89
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:lvishpal408@gmail.com
            oidcIssuer:
                https://github.com/login/oauth
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABnxQ3EtoAAAQDAEcwRQIhANJSzTUr3ElqoRt3h2iq+PRDL4ubvHPCpyByOCFU2cxGAiAiz4p5XRARq5dbWbUCA+qOLv/1qpklahgC5+39N/8awg==

    Signature Algorithm: ECDSA-SHA384
         30:65:02:31:00:fa:1d:70:12:ea:dd:a8:16:19:74:5e:e3:81:
         fa:48:c6:fe:06:47:56:54:a6:f9:a5:3b:95:d6:94:d8:c6:23:
         78:5f:c6:c1:e1:93:98:a1:f0:30:80:9c:42:66:5e:01:a4:02:
         30:6b:c8:03:63:1c:85:14:dc:64:1e:2e:ba:bd:8c:16:01:68:
         55:56:e4:f4:61:49:b3:0b:79:39:e8:eb:32:81:8d:e7:92:f4:
         1e:b8:7b:ca:f5:39:9f:bc:08:6f:c9:75:4a

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1782750582,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 2010970355,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1890392054\neyRv+jMDDiipnzmTYMr31sf9BUV9hGm1mhRGsryOOfE=\n\n— rekor.sigstore.dev wNI9ajBFAiEAgG4LXOqHvPO7MxjLxmBpzsXjGZkk4DN5UzQkqpwJ6RoCIAF3jv0mLmh/9Dw5Lh54EUMI0mBOxrdpw00zsVRa05rf\n",
      "hashes": [
        "cbc9db28fb61180facc7559f2f445bdaca2003abcded4a11d85ef3f889cc6f42",
        "6c20a809abb312b1db03dd11c77bf698cb710e96c6ccae0c67a5d992ae867cb4",
        "8dbf64a060b9a08e644a00fcba1c12c205e8e7ca1f153bbdb1bf346b126055dd",
        "ed18d4c8afcb4b9563727b871b9e5cd9289a3bd8376b53778fcc88f1814bfee5",
        "511175fd6ee9904a64eaa29e0024f85539b9fd16f4ac67cfe6c465c90a8d4385",
        "822a3031422a6845e10f67008d62626e278c1b7e89f646f37d153aec01b4b731",
        "d2600e52583c358f38feb4445ea1d350fd5baec50c08c8e02210d5aed86a91dc",
        "8cc19ce63774d8ebc67a50e02aeb9ec817245bbf389235eb0abbae87212d6141",
        "4ec16f74071be864f2eaf8cb8d27ee3266fde1752ed528db13f6cc6feee36cc3",
        "ff8675d4ad5513662cb0b74274b078600e563c360689c340818f5b0eb48f973c",
        "a11941c4167d13196d1751c06c7037497f64291dd6c63446bcac9cbced2d9aab",
        "f84bbad50b3f85d1a205f6543af66ebd3042600a1784ca824a52663ce4ee8607",
        "91de1b67b843985ae482b8faf9939b0e9e786fe70b40458f5144a4d2ff2a64f6",
        "62e172130f39270414ad5faab6229b6b8de8a4f9a0755ec38d518327815e0e56",
        "9d6d57b22f4211eb181c88672cc06339b0bc95f86e8f02738b60dcf65ff38139",
        "7df0f15831a6ec190785220e2ce11661330c787946098cc33a4e6d2945dfa909",
        "b23dec25bf2fcb47b58ab3aaa2a8a1623d35c8a9ab9b0138974c7df0b269ac1d",
        "ded7db3b326480b1d5dd899f24f24be3f361912ea5239844f0e02a904c9d8228",
        "09e4a932746081f4c51cf602d3971757f240696d1c369477ad546f9e082087dd",
        "fa1844451d266ad89de4dbc793b75db0f396279240cb29f5d5ffabb99a4c5b7f",
        "329d1b941ce4c708fa38602881534d34cc103385f1453142ac70f9659cb6c188",
        "51dbb1224c3cfbde22bd6927291927b4baf581894d03ca0a98e29e9424246934",
        "74805fb6c1ce5a15ad8bf73ba6e70f35f6a6b1337236e6a6dd5883c7aee4acb0",
        "fbf559e7a32c20fc4c8b22c0a1dcca5e8e53116750a77eb3f3da8b869ce5a00a",
        "75ac6665a6a3469655f89c4788e61984906248a379b9caa38765a719b1e18abc",
        "0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
      ],
      "logIndex": 1889066093,
      "rootHash": "7b246ffa33030e28a99f399360caf7d6c7fd05457d8469b59a1446b2bc8e39f1",
      "treeSize": 1890392054
    },
    "signedEntryTimestamp": "MEUCIH2U7XGlNxrnv3ix/dqhXQkv47BRP417Fn0ruUOLn2iFAiEA0U6PFgreqigoBdlS+gVNloMGgaVB3iHvz9dgSNM4hqk="
  }
}