Skip to content

Clarify how Helm chart updates track image updates - #3615

Merged
SharpRake merged 3 commits into
chainguard-dev:mainfrom
SharpRake:helm-updates
Jul 20, 2026
Merged

Clarify how Helm chart updates track image updates#3615
SharpRake merged 3 commits into
chainguard-dev:mainfrom
SharpRake:helm-updates

JW suggestions

a16aa65
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Jul 20, 2026 in 0s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517861197803940058079433925356274636501292508043 (0x5ab5b301524cf650fc69538ec08f7e6ef615638b)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Jul 20 20:42:45 2026 UTC
            Not After : Jul 20 20:52:45 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    cd:49:51:48:e0:ba:62:a0:1e:fd:77:aa:1c:6a:34:
                    7b:c2:f7:4b:c3:74:bf:92:0b:02:99:40:b1:b2:ab:
                    d0:28
                Y:
                    c5:fb:ae:58:9d:0d:a4:fc:4b:0b:c9:00:c8:b5:7e:
                    d1:bf:6f:6b:9c:98:54:e3:77:26:ca:2e:34:80:51:
                    41:be
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                BF:9D:78:E0:5F:10:FD:67:C4:EF:A1:61:FE:1C:00:04:D7:BE:CD:28
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:mark@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABn4FETgMAAAQDAEcwRQIgU8s58CGIFtrHghTfTkLx+1lg3xRjO7Fj2Z7a9daubWkCIQDgnUhZdUfRjQIWk9Gp2oZrGN1HxVzeeltB2VJxZKGwAQ==

    Signature Algorithm: ECDSA-SHA384
         30:66:02:31:00:9a:6f:5e:a9:c0:ac:16:07:11:e9:76:aa:ad:
         22:f3:7a:b8:3a:67:c2:f8:40:28:2d:bf:5d:a8:5e:b8:95:96:
         c0:ca:83:99:ba:f3:86:fe:30:77:fb:20:a0:a0:13:f5:f8:02:
         31:00:a4:89:54:55:fa:8d:e4:88:69:98:4c:f0:0c:8f:a1:8e:
         86:11:d3:08:5c:cf:70:bf:9a:46:40:cf:00:ad:47:e2:95:14:
         f7:9b:4c:d9:83:9a:89:ac:60:1d:f0:5f:71:30

Rekor Entry

Details
{
  "body": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiIwM2VlNDkzMjExZWZkYWRlYWJjZmMwYTUzY2EwOWIxMjMyMDk1MjcyNmJkMjgwYWUzYjBhOTlmZGNmYzEzM2VhIn19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FVUNJUUNxSzk0bS9DMUVlUGRLRVZaUHMrdVRpUm9oSEFjc1dvbXdSL1NMNVZkak5nSWdHR2F1aUE0YitxU0NUNkZmeGZ3SW00TmlQWTVvRUU4dklpMnpFakw3N0FRPSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVUkxha05EUVhFclowRjNTVUpCWjBsVlYzSlhla0ZXU2swNWJFUTRZVlpQVDNkSk9TdGlkbGxXV1RSemQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDU2U1hkTmFrRXdUV3BSTVZkb1kwNU5hbGwzVG5wSmQwMXFRVEZOYWxFeFYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVY2Vld4U1UwOURObGx4UVdVdldHVnhTRWR2TUdVNFRETlRPRTR3ZGpWSlRFRndiRUVLYzJKTGNqQkRha1lyTmpWWmJsRXlheTlGYzB4NVVVUkpkRmczVW5ZeU9YSnVTbWhWTkROamJYbHBOREJuUmtaQ2RuRlBRMEZqTkhkblowaExUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlYyTlRFMENqUkdPRkV2VjJaRk56WkdhQzlvZDBGQ1RtVXJlbE5uZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDBsUldVUldVakJTUVZGSUwwSkNZM2RHV1VWVVlsZEdlV0V3UW1waFIwWndZbTFrTVZsWVNtdE1iVkpzWkdwQmNFSm5iM0pDWjBWRlFWbFBMd3BOUVVWQ1FrSjBiMlJJVW5kamVtOTJUREpHYWxreU9URmlibEo2VEcxa2RtSXlaSE5hVXpWcVlqSXdkMHQzV1V0TGQxbENRa0ZIUkhaNlFVSkRRVkZrQ2tSQ2RHOWtTRkozWTNwdmRrd3lSbXBaTWpreFltNVNla3h0WkhaaU1tUnpXbE0xYW1JeU1IZFhkMWxMUzNkWlFrSkJSMFIyZWtGQ1IwRlNUa1JGZEVRS1lVWldORlJXVW1wTk1EbFZZWHBPVUZKSFl6QlVWVkpHVFdzMU5tRXpaRTVoYldNeFZGaHdRbFV3WjNsaFJFSnJVMFZLTmxReWJGWmxWa3B3Vmxoc1V3cGlWVnB4VjFSSk5VMVhTblZWYm5CTllsZFNNbGxxU210ak1YQlVUbGR3YVUxcVFYZG5XVzlIUTJselIwRlJVVUl4Ym10RFFrRkpSV1pCVWpaQlNHZEJDbVJuUkdSUVZFSnhlSE5qVWsxdFRWcElhSGxhV25walEyOXJjR1YxVGpRNGNtWXJTR2x1UzBGTWVXNTFhbWRCUVVGYUswSlNSVFJFUVVGQlJVRjNRa2dLVFVWVlEwbEdVRXhQWmtGb2FVSmlZWGcwU1ZVek1EVkRPR1owV2xsT09GVlplblY0V1RsdFpUSjJXRmR5YlRGd1FXbEZRVFJLTVVsWFdGWklNRmt3UXdwR2NGQlNjV1J4UjJGNGFtUlNPRlpqTTI1d1lsRmtiRk5qVjFOb2MwRkZkME5uV1VsTGIxcEplbW93UlVGM1RVUmhVVUYzV21kSmVFRktjSFpZY1c1QkNuSkNXVWhGWld3eWNYRXdhVGd6Y1RSUGJXWkRLMFZCYjB4aU9XUnhSalkwYkZwaVFYbHZUMXAxZGs5SEwycENNeXQ1UTJkdlFsQXhLMEZKZUVGTFUwb0tWa1pZTm1wbFUwbGhXbWhOT0VGNVVHOVpOa2RGWkUxSldFMDVkM1kxY0VkUlRUaEJjbFZtYVd4U1ZETnRNSHBhWnpWeFNuSkhRV1E0UmpsNFRVRTlQUW90TFMwdExVVk9SQ0JEUlZKVVNVWkpRMEZVUlMwdExTMHRDZz09In19fX0=",
  "integratedTime": 1784580165,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 2207573161,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2085792603\nepGCKi1XFLqjGaB478kZSHouZJhfY5Pw0ZggWMs2C78=\n\n— rekor.sigstore.dev wNI9ajBFAiAk4V3D/LcZesX+pNLYvQnJmkHpCgBer0k7A5zC2bq4yAIhAPXRYQLmi3t1Y4qgloHNV3l6vYGTjWK2l333beUr9gx3\n",
      "hashes": [
        "6426c87b2eaa5c014a8a6702b91e992e7cc6f40dc4edd736fdfe715eebc6fba9",
        "5dcc14e4b7e3d4fc6b4b00740dc2d5db63a37d0b8f0b3872d3f816c2c09adbe4",
        "7a9d2a646121c200ce10210fe2928c94d1818b1273242201c05c79166797f122",
        "aefdff2f3c0b5419836fa60f08abc73ca9c8b9dbb64ade85671697360a43dd95",
        "517da06990a877f14fb49c6eb8b7f50a704029265b5ed66cf1eadf2dc7fb1dda",
        "fd3a55a8e6592ab9060bf75d33c753ea23d9c86e72f81b99f0a1a61b0fe81182",
        "f10f4e063877117dbae4ed6987c54388b3ebb19bedad009fc00c031e3de23b9e",
        "5c48ae4904fed8c625742cb4233fd6302ad52ed96d3813a48b654d4c10150b27",
        "3b417a95c452284ca97128272608f5710a0038feabfb5be06055731e92993ca6",
        "bada4cbe252db00af00e20b98b2978286e233946a4dbdecaacbe7eb3715020e3",
        "4f35b3e21c536aaf70fea1304c6e7af42dcde9e93c22ae3c1e32ed4eae8881ad",
        "dec52b0c2654a06f760a44f2c1a1044dd151857a605a8825267c515dbd64ac47",
        "9dc135a46cc24bc2b1660cfe76690f80a0aa396ce501569a4acbf478e2f02b3d",
        "bce10785a217e37e63d55ef5f4dbf1a508faa66f43fa63162617372f71f7f5d1",
        "a3e6ca9740c5f441af84a4948afd75bb5242f4a08515b477912953147fb6d93b",
        "541520f64df47b068d645f0c4170e6afed1b32d9a5e059825564cca8b0570d4b",
        "905a0c9ce135acf21ded7050c7cc79d9d626a82a38403a6040ac4aebae19fc24",
        "69285a17cea0e170074afd64626d21b63bebecae4485d531c843a836787d5c25",
        "637d6162f879c3a1aeec3593169cf58475f001cc6f469e0d71de5abb3a530ffc",
        "b2c75a5f74429036db9b4b927e40987170b17a4f44f5615e625dc02349e693c2",
        "1b14faf82117c58f0093f6deb27456fc82b70e19de1d0e57e6b21cc3c2f4d434",
        "46afc0d9a4c2f5ee7895d363729b09dbaad7fe1f0994de991f1830ef211ae82d",
        "fbf559e7a32c20fc4c8b22c0a1dcca5e8e53116750a77eb3f3da8b869ce5a00a",
        "75ac6665a6a3469655f89c4788e61984906248a379b9caa38765a719b1e18abc",
        "0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
      ],
      "logIndex": 2085668899,
      "rootHash": "7a91822a2d5714baa319a078efc919487a2e64985f6393f0d1982058cb360bbf",
      "treeSize": 2085792603
    },
    "signedEntryTimestamp": "MEQCIEYQSYPKTsUaY1CtEF0Tu1P5GoA2Ygot3iDja9aAQKOFAiBEoTaiJTGJ3DgOBhyhT4nkmaZWsqSJ1mEdigPbj3mxhw=="
  }
}