Clarify how Helm chart updates track image updates - #3615
Merged
Chainguard Guardener / Enforce - Commit Signing
succeeded
Jul 20, 2026 in 0s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517861197803940058079433925356274636501292508043 (0x5ab5b301524cf650fc69538ec08f7e6ef615638b)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Jul 20 20:42:45 2026 UTC
Not After : Jul 20 20:52:45 2026 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
cd:49:51:48:e0:ba:62:a0:1e:fd:77:aa:1c:6a:34:
7b:c2:f7:4b:c3:74:bf:92:0b:02:99:40:b1:b2:ab:
d0:28
Y:
c5:fb:ae:58:9d:0d:a4:fc:4b:0b:c9:00:c8:b5:7e:
d1:bf:6f:6b:9c:98:54:e3:77:26:ca:2e:34:80:51:
41:be
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
BF:9D:78:E0:5F:10:FD:67:C4:EF:A1:61:FE:1C:00:04:D7:BE:CD:28
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:mark@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Unknown extension 1.3.6.1.4.1.57264.1.24
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABn4FETgMAAAQDAEcwRQIgU8s58CGIFtrHghTfTkLx+1lg3xRjO7Fj2Z7a9daubWkCIQDgnUhZdUfRjQIWk9Gp2oZrGN1HxVzeeltB2VJxZKGwAQ==
Signature Algorithm: ECDSA-SHA384
30:66:02:31:00:9a:6f:5e:a9:c0:ac:16:07:11:e9:76:aa:ad:
22:f3:7a:b8:3a:67:c2:f8:40:28:2d:bf:5d:a8:5e:b8:95:96:
c0:ca:83:99:ba:f3:86:fe:30:77:fb:20:a0:a0:13:f5:f8:02:
31:00:a4:89:54:55:fa:8d:e4:88:69:98:4c:f0:0c:8f:a1:8e:
86:11:d3:08:5c:cf:70:bf:9a:46:40:cf:00:ad:47:e2:95:14:
f7:9b:4c:d9:83:9a:89:ac:60:1d:f0:5f:71:30
Rekor Entry
Details
{
"body": "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",
"integratedTime": 1784580165,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 2207573161,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2085792603\nepGCKi1XFLqjGaB478kZSHouZJhfY5Pw0ZggWMs2C78=\n\n— rekor.sigstore.dev wNI9ajBFAiAk4V3D/LcZesX+pNLYvQnJmkHpCgBer0k7A5zC2bq4yAIhAPXRYQLmi3t1Y4qgloHNV3l6vYGTjWK2l333beUr9gx3\n",
"hashes": [
"6426c87b2eaa5c014a8a6702b91e992e7cc6f40dc4edd736fdfe715eebc6fba9",
"5dcc14e4b7e3d4fc6b4b00740dc2d5db63a37d0b8f0b3872d3f816c2c09adbe4",
"7a9d2a646121c200ce10210fe2928c94d1818b1273242201c05c79166797f122",
"aefdff2f3c0b5419836fa60f08abc73ca9c8b9dbb64ade85671697360a43dd95",
"517da06990a877f14fb49c6eb8b7f50a704029265b5ed66cf1eadf2dc7fb1dda",
"fd3a55a8e6592ab9060bf75d33c753ea23d9c86e72f81b99f0a1a61b0fe81182",
"f10f4e063877117dbae4ed6987c54388b3ebb19bedad009fc00c031e3de23b9e",
"5c48ae4904fed8c625742cb4233fd6302ad52ed96d3813a48b654d4c10150b27",
"3b417a95c452284ca97128272608f5710a0038feabfb5be06055731e92993ca6",
"bada4cbe252db00af00e20b98b2978286e233946a4dbdecaacbe7eb3715020e3",
"4f35b3e21c536aaf70fea1304c6e7af42dcde9e93c22ae3c1e32ed4eae8881ad",
"dec52b0c2654a06f760a44f2c1a1044dd151857a605a8825267c515dbd64ac47",
"9dc135a46cc24bc2b1660cfe76690f80a0aa396ce501569a4acbf478e2f02b3d",
"bce10785a217e37e63d55ef5f4dbf1a508faa66f43fa63162617372f71f7f5d1",
"a3e6ca9740c5f441af84a4948afd75bb5242f4a08515b477912953147fb6d93b",
"541520f64df47b068d645f0c4170e6afed1b32d9a5e059825564cca8b0570d4b",
"905a0c9ce135acf21ded7050c7cc79d9d626a82a38403a6040ac4aebae19fc24",
"69285a17cea0e170074afd64626d21b63bebecae4485d531c843a836787d5c25",
"637d6162f879c3a1aeec3593169cf58475f001cc6f469e0d71de5abb3a530ffc",
"b2c75a5f74429036db9b4b927e40987170b17a4f44f5615e625dc02349e693c2",
"1b14faf82117c58f0093f6deb27456fc82b70e19de1d0e57e6b21cc3c2f4d434",
"46afc0d9a4c2f5ee7895d363729b09dbaad7fe1f0994de991f1830ef211ae82d",
"fbf559e7a32c20fc4c8b22c0a1dcca5e8e53116750a77eb3f3da8b869ce5a00a",
"75ac6665a6a3469655f89c4788e61984906248a379b9caa38765a719b1e18abc",
"0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
],
"logIndex": 2085668899,
"rootHash": "7a91822a2d5714baa319a078efc919487a2e64985f6393f0d1982058cb360bbf",
"treeSize": 2085792603
},
"signedEntryTimestamp": "MEQCIEYQSYPKTsUaY1CtEF0Tu1P5GoA2Ygot3iDja9aAQKOFAiBEoTaiJTGJ3DgOBhyhT4nkmaZWsqSJ1mEdigPbj3mxhw=="
}
}
Loading