Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (03a4fe4898)' (#233) from fix/prod-evidence-2026-09-29 into main
Deploy to Coolify / deploy (push) Failing after 10m21s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 2m7s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / integration (push) Skipped
CI (SIAX Cloud) / sonar (push) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / security (pull_request) Failing after 17s
Security Scan (SIAX Cloud) / security (push) Failing after 17s
CI (SIAX Cloud) / security (push) Failing after 17s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 22s
CI (SIAX Cloud) / integration (pull_request) Successful in 37s
CI (SIAX Cloud) / quality (push) Successful in 59s
CI (SIAX Cloud) / quality (pull_request) Successful in 3m58s

This commit was merged in pull request #233.
This commit is contained in:
2026-10-16 19:55:40 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-864b5ef3c4 (sha256:642bc59825ac81e2aa48b4606467bca900f143f4be3e42ef8ec98acab441fa81) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-03a4fe4898 (sha256:332211b522da423df3ac49b2e428948be3c43e5667d98db96ada76ba410136d1) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVR+2XODcu7dwunt8eUAnLQ4GpOaz
lOOb6J8nmyy9oln3j2sYy1w3YJKovRHB5AebTbIJtNpruRfrbVthx6x1iw==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDMefkvT42zdCODAz5fOxdaR9HMMg
ouT87fKtPiC99+ViiPFFRhzxyAMZwRtlJZLj3TIFq8mEpRCG9F/lrDStMQ==
-----END PUBLIC KEY-----