Skip to content

More rule tweaks

20ab0cc
Select commit
Loading
Failed to load commit list.
Merged

Add file type support for report generation #898

More rule tweaks
20ab0cc
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded May 19, 2025 in 0s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464767587840292663773910689438202448216507060506 (0x5168e640e10075de51dbecc54a37942fb608911a)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: May 19 20:42:25 2025 UTC
            Not After : May 19 20:52:25 2025 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    b3:03:0a:50:2c:fc:e1:ab:4a:3b:ce:4d:92:9b:8d:
                    6e:18:e0:2e:41:ff:16:9c:e6:45:50:a3:b8:4d:f7:
                    71:f0
                Y:
                    93:e6:0c:13:2e:12:91:8e:1b:ce:9d:91:6c:5e:ef:
                    de:e8:b5:30:59:10:77:6e:9a:74:18:11:b8:b9:97:
                    72:9b
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                ED:0C:7A:0B:3B:C0:66:AB:28:64:1B:F0:33:50:D6:EB:9D:A0:D9:98
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:evan.gibler@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHsAeQB3AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABlupIjp0AAAQDAEgwRgIhAIcirJHzDImTx6MHXj9mXoK9t7D46eSa9NmtCm7kz5dqAiEAgn0Gs6w3OJ7G9qjNWpercHwXdAPfCt5TzW1k7Nuk/P8=

    Signature Algorithm: ECDSA-SHA384
         30:65:02:31:00:a1:54:43:4e:1b:c7:3b:70:94:6f:fc:6d:5e:
         c6:d6:a9:75:da:f1:f9:96:ce:11:58:29:9a:17:2b:bc:ce:4e:
         58:ea:70:de:5f:79:0f:aa:85:ff:51:27:05:f2:67:c0:55:02:
         30:78:58:a9:66:73:fa:63:52:15:db:92:8d:6e:02:3a:b2:33:
         55:2b:15:9b:8a:d0:fc:a6:f9:f7:c7:ea:65:7e:5c:36:33:8f:
         fb:be:d8:f9:9b:cb:b3:e1:de:ec:12:c1:b4

Rekor Entry

{
  "body": "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",
  "integratedTime": 1747687346,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 215274918,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n93410326\ndm8reb0aPp6035BSfWPJkf9RJV8HIS64nuJp7OBFyeg=\n\n— rekor.sigstore.dev wNI9ajBFAiA+hB2xSenFfEmoMRZSHDGt3O9/1gA/omxiZKM5DCV/iQIhANAYDJauFhFMX9Iy6+ByZc7yaWMfMers4C3ytqdauuuI\n",
      "hashes": [
        "c003c4c3829564ca4e02e59581ba912f28a6750fbfb75f6c955b97be4a0f5bc2",
        "2919e20f412353846aeb5135032429b399431d98c05c3795719ccaf07a4f32d1",
        "a1914e53f817144bb238091fcffb9fcfec08d07ea3b7d6e8ec1511507e60a45c",
        "dd89182752a00f1ff1871a5baaf88febff7b04a669621c37e161b9f92b17841a",
        "f4583b3ed0ae799d27eebc93d5847c811fd589ed5e8cb3d39501d23db4b38190",
        "ab60972ce95d9804224f6c704b955922bafa8479f169c0a5c45a871c0ac97965",
        "aab1c932391d3a1086b5e73b420f55a58563d46293c654a0e38273ae04164760",
        "cf3b88f00af7b705d1130a4e8e960f5e9b29f5fcec147c0542d9ad215dbc49ea",
        "354a5ef22218d8041ac2638845b7c490cf580eb65a7eec214ba99dc1e17f6862",
        "8124f39f3579de391bf0d14a6697a8d2095e3bc56dbeaf315a8bd1aa6f5aede0",
        "94d57dc06e26071304ce18cf012a964c366e4ca1247552b21b468fd462e33475",
        "c1d0c3be9cf9acf89d33971a9dcbeda15d886db217c1487184304d7581d234e1",
        "ade308e49371b9dd7da889cbc24ca0fc927cd842a4094b1289815509cbe476b9",
        "f6750f2a4bfbfaaf84fb96c6ab8ea06580f508f731968d5d4ec65f1edc5a085f",
        "45dc829753d7379a9d9bd690a608735bcadf7ea6c083d8922716d01b68095e18",
        "df2682023066228e9967509798c595ff1f423d890860e51ffb117e5eecf994e1",
        "5ff5d71f362926abcc364109dce974ef13c7feee6e143f8215be33e82804c09e",
        "8102d5830d8dc2410f901ed1d1096c0d6ed5d1e01ccf84f979b95ebf30b0815c",
        "87955334d08e46d62bc2f7fd879c25031fa4dfef52639fd52044ee367972e979",
        "fbed4b32ecf7b48756d7fa5f11f84f7d70b8a2dd40c030170dc3f27e26f31b27",
        "eeff2a3c73432deae976e68cc74e9e6ff3308284307334e7fdc606297ffdc19e"
      ],
      "logIndex": 93370656,
      "rootHash": "766f2b79bd1a3e9eb4df90527d63c991ff51255f07212eb89ee269ece045c9e8",
      "treeSize": 93410326
    },
    "signedEntryTimestamp": "MEUCIFLT42a9rs6Sda3ZYQZ/Z7TRL8iuvqGPX1A/GFvUAU2OAiEAj3zMmGoKYZhX016SLoDiMAX+6QNpYhBs2MiUezDOwLQ="
  }
}