Skip to content

fix: fall back to GET when APKINDEX HEAD is unsupported#2282

Open
arpitjain099 wants to merge 1 commit into
chainguard-dev:mainfrom
arpitjain099:fix/apkindex-head-fallback
Open

fix: fall back to GET when APKINDEX HEAD is unsupported#2282
arpitjain099 wants to merge 1 commit into
chainguard-dev:mainfrom
arpitjain099:fix/apkindex-head-fallback

fix: fall back when APKINDEX HEAD is unsupported

ea2aa6d
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Jun 18, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622574507206988121364413903686812672903563172460 (0x6d0d34d8782e8a395bcfe1d90ba5c2b8e8cfda6c)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Jun 18 13:36:34 2026 UTC
            Not After : Jun 18 13:46:34 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    6c:b5:b0:c2:42:d9:56:ee:fe:ba:d1:e5:dd:94:19:
                    a5:5d:5f:bf:ee:15:48:ef:81:d9:af:de:cc:06:e8:
                    8e:0c
                Y:
                    50:8d:99:c5:8b:4b:ab:76:b5:18:14:f2:57:81:50:
                    5c:9b:0a:e0:a0:c8:14:ec:ec:c5:dc:a7:b1:1f:aa:
                    87:8f
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                7A:DC:5A:9F:EC:E0:5C:54:6A:3E:9A:E8:0B:9F:E6:85:3A:4C:65:29
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:arpitjain099@gmail.com
            oidcIssuer:
                https://github.com/login/oauth
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABntryoFAAAAQDAEYwRAIgAsMT6nn2p9PAqXIGeu06eJslWvB9e1MhX1IGkUVfVnoCIGesKHW78EprhqSTpBqFGsppVIuEGiaJ3t+Q7zLPfLTJ

    Signature Algorithm: ECDSA-SHA384
         30:65:02:30:0d:f6:f5:d5:7a:9b:ab:36:23:1c:f6:ba:59:a7:
         da:92:af:7f:bc:b2:39:92:63:23:de:47:d9:c0:3e:4f:29:bc:
         c5:6f:fc:ff:cd:1e:b3:ef:a9:7e:c3:93:c9:fd:d1:e9:02:31:
         00:af:b4:48:b4:df:be:37:29:03:04:1a:af:c6:1a:b7:5d:49:
         23:f0:e7:c8:7d:3a:73:e6:15:85:fe:9a:52:56:af:76:00:c9:
         7b:98:0b:3e:15:1a:30:be:d2:d3:98:ca:7b

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1781789795,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 1859722093,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1737818383\nTTVU3Gb7OVlmyRj+z1o9PJzPsi9U6ay2TZScqR4GQlY=\n\n— rekor.sigstore.dev wNI9ajBFAiEA3zVdwDYXDxnCZRtqlqUtIV96oJqQxejCbdb1YRzE9NkCIAPLjDeczKYBZc26nqn02AxvJUQfz5TbkNqF/KI8wBgE\n",
      "hashes": [
        "29d36c743bca0a27aa0fcf51aeb85efb0a8538de7aae06f2cae614fbd8d020cf",
        "7bf79062b9835a0728c8c2c028e5abb916ae21a1b9375253bf279e45f1a98d70",
        "ab56b08ada6aa3151e188aac9d777255c3fcb5b0a043d9bd8c75d8d5a9ad9c4d",
        "1d3a1c5c44e3ce91e83f60fc43328a765e19a2f67852b68ad72902a55ec92fb8",
        "42773f352572de99b90146a27537cd3a4f8136bf2fc6b6c1ed6a31f505882a9d",
        "26f6cdb2147bee00ddc9cecb81c6753e46daa47ffaa55d6662bce53d2601300a",
        "d358a82e4bf5cbf9bf5c301bb8f65cbdacd0934bbc017d7c3b333c5fb12da41f",
        "8ced88ec86006d235fa6728c36cdbe73ce0527a0ca81a4af448107b64a29ce65",
        "230248c28a194a093bca4f2de6a1cd6e462601fdf37ae2b42a9ad85437643c1b",
        "85ba6b83785cc05026e59b3be95c00728827896aff4333033ba4e542bf3d2db6",
        "5a974f9ad16cc57dba7f427587e3c662dffe1365604a851eef9d9ea64656af57",
        "477c6d61669401ef4ecb529f7139c27ebaa4b4f0eef03a941e0399fae3f250a3",
        "30ef91fd24c8fcd6902475b4c7664c1f8e95e1b3cfa40e3b2e977161a6004e59",
        "2891dcbee23586f9386de88335a44027cf9497df5d6d249aaef4398c603fb6d2",
        "4378827bf162fc8c8ca1956e9cbaff348c384664705704e7e1f5e71cf370f819",
        "e1f0dcb24cef52430f7c6867b74857ac69ae60a04590e46c407a0068514a0eee",
        "a40365ed121e7eaaa0160b9753f73d7ea595ce0f2fc23cd86970a9aa6bea0663",
        "31e8bb02b20c35dc9fedfc8ceddd7bc521b0e748200050a1ccf2c50e170b4e73",
        "daf4379080c9ba80afe434d3bd5705a1fd7a2fbb3ee4d88addb6be8ca52f48cb",
        "3cb506b7f77349ecd64b7dc64aab740eaf14db04e8e29cea11364ee101c276b6",
        "9aa33b27e8bbe48a6e0f4f507a3894063787f390196be7d29b84575c59a3de52",
        "ef6142e4560b8710786b88a20bde7aa3407f7d3e788a9e11e35becc364012ad5",
        "958190f626f00bcfac98c90f43a4dc8499b71fd35cfda4d82df75169c1850a1c",
        "75ac6665a6a3469655f89c4788e61984906248a379b9caa38765a719b1e18abc",
        "0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
      ],
      "logIndex": 1737817831,
      "rootHash": "4d3554dc66fb395966c918fecf5a3d3c9ccfb22f54e9acb64d949ca91e064256",
      "treeSize": 1737818383
    },
    "signedEntryTimestamp": "MEQCIFQcGp9snwIkIqkqNksoljKCwvYG7YdV3TcyWR05fwaQAiB7qvb82WKcCBAf+k//AiKVZi5CF/Lycof0asGPoKttJw=="
  }
}