Fix partial read edge cases #969
Merged
Chainguard Enforce / Enforce - Commit Signing
succeeded
May 30, 2025 in 1s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283409599689510325656589634184085203339848645821 (0x31a486a68272bd5cd7d7b8bc0fee87d34a7afcbd)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: May 30 17:30:05 2025 UTC
Not After : May 30 17:40:05 2025 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
79:cf:ea:fc:48:b5:08:43:ce:1f:4c:b1:c6:88:ec:
b6:64:27:e6:79:9b:58:67:e3:47:a0:d6:03:70:23:
ab:97
Y:
0c:76:5f:9c:f7:cf:ca:0d:b3:75:f6:2f:6f:d3:57:
44:16:5b:23:8b:84:47:bd:b7:3b:31:4c:9d:b7:f5:
93:90
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
51:D3:86:3F:08:1F:68:20:F2:4B:A7:70:E0:4F:92:30:29:43:F3:7A
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:evan.gibler@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHsAeQB3AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABlyI+bOQAAAQDAEgwRgIhAJEEQFb2GKHhQU1L5NYAr9J8UISQ+bggfJJYw6wgli04AiEAtzwwXwIxVJbdQOd6Boahpbyjvmg68s0hASmvlyrVHE8=
Signature Algorithm: ECDSA-SHA384
30:65:02:31:00:bb:8c:79:35:b6:07:e1:af:ed:69:57:61:a6:
c4:24:f1:a1:47:af:f2:b4:b2:84:7e:fc:20:fd:53:a2:ac:94:
36:c3:58:d8:7a:e7:78:6e:bb:36:c8:58:ab:75:14:a6:d4:02:
30:15:4b:8b:dc:a2:51:ad:70:ec:41:5d:7f:ed:33:db:d3:84:
a9:7d:f2:95:57:61:de:ba:05:9f:13:84:69:53:d2:9a:e4:d6:
89:ad:df:fb:f4:2f:b4:a6:74:f5:da:8f:c4
Rekor Entry
{
"body": "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",
"integratedTime": 1748626206,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 225907824,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n104080414\ngaw/AiQO2TfTlSI13pY1eUfGSlg0iavA+/ZtmXOAEC0=\n\n— rekor.sigstore.dev wNI9ajBFAiAz4/d1Gm3S3knSm8d2/MA5F0iNVy1hHFLhl66OY46TsgIhALmm+PMZCFnrvT3L2mF2QPShzKW5P6aida4RfKeMhSnm\n",
"hashes": [
"ccb505b14ade1651e921675246bf37ebaca5a67cad6b429b5c44b4ab2072ebe9",
"f6c56de991fd0976bd6732f1cc8616b6010ca715e9940b77306c65370211b78f",
"f5bfc3a00b0c66a4ee164b9b611a9e4bf577a35c8bf16bd2b1e603c6969db661",
"a66ee059a4e5b67dad447c96e21fcb0e79132ede83b8bfa38dd6b31ef3391f55",
"8bd4ccc55055f83a977cda43a7186392a7f9cd90cd45ebbfdf3645186429e942",
"8487e965816daed2c337c720fc31499ef04356d1e57d5f01b6af8fd9d2cd3ff5",
"c66141f24ddb0ad449eeb9919e49c32810739d5f05c88b852019d775ffb648d1",
"a477fb5fb01f01e1e26946c9934bc8ddf11f003ca9f5475f1979e717316cd5f7",
"1b36a4c1e53b2707d8e50e1349f9dad6df6a1c8500612c3242a3b6108f8e503b",
"11ebb364d010740ee997021dc5b069374f42e2da124469e23b3fd4d561560a31",
"e2f838a40dc337725c2639da3f215d330778a0bef067549378660b421d37c3c5",
"d83eefba307e93b8a63254ac24b2054275ef5a0ad2a45172bec7105224497584",
"4b4c3fc2cad54906ada44bc41b0330fbf66138410437c98605b3a65b1147607e",
"3c02f4f31150b947ec5fcddf1a2c49a0796640a2008123bc4984cad236660cfb",
"ac5b89d0e025fac3e1a42d155b667331ccc60bc23e476131b8b0402546314af4",
"e1dd4688ff725896b90d37b25c1134b143e1b0ad94c2480b9fba4c8e3c3a4315",
"4055499f0ecfbd87706fedec804e69a0f845bb1224b893a293db1f1fcbb64884",
"f71dd644dfedb306739752d592aaab3d1e5ea19a7b63ce8dd392ad73ad416213",
"4b7bc9a4307811339dc1daf4384a69bc98823d42a2066a5c81f459485ef1bc4f",
"6c764751fe9fa94f16e3722171bc666c73a6c71ee2b8992b51ab9d3362bb0c1e",
"fc90278aff81339994c7bada7b3dc976e79b71aed107892973c1dd17104cc28a",
"9ad6b97c7fe0170c49ff47d3f321a99f7b05098d06d51639e7921f966d0b2273",
"eeff2a3c73432deae976e68cc74e9e6ff3308284307334e7fdc606297ffdc19e"
],
"logIndex": 104003562,
"rootHash": "81ac3f02240ed937d3952235de96357947c64a583489abc0fbf66d997380102d",
"treeSize": 104080414
},
"signedEntryTimestamp": "MEYCIQCKXXSNv794kfdT8KWyIC6yRBO8s8hDY9Vg6D0qhtUZWgIhAJISAiDhQGLt643HxazZZvUxk/+v3NrmcoyuYVD36/pA"
}
}
Loading