Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (116b1df3b8)' (#559) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 8s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 12s
CI (SIAX Cloud) / security (push) Successful in 15s
security / scan (push) Failing after 21s
CI (SIAX Cloud) / sonar (push) Successful in 57s
CI (SIAX Cloud) / integration (push) Successful in 1m8s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m24s
Deploy to Coolify / deploy (push) Successful in 1m29s
CI (SIAX Cloud) / quality (push) Successful in 1m51s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
CI (SIAX Cloud) / security (pull_request) Successful in 18s
security / scan (pull_request) Failing after 18s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m20s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m34s

Mergad efter gröna checks (Simons beslut 2026-11-10: godkännandekravet förbigås, status checks aldrig).
This commit was merged in pull request #559.
This commit is contained in:
2026-11-11 12:31:23 +00:00
3 changed files with 4 additions and 5 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-dd226e01eb (sha256:0aff8f3021300fa552c229666941811c793c7b5b85b4dbaec4f0acd91dda5729) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-116b1df3b8 (sha256:50c3fb070f21e3fc08cf80b78f73f9cba989074c222870e030a2a9e597222874) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELvxN82T73fjYyjj4kCLmktl0tzij
YVio7VU9r9r4xJICcyWwyWBewdTy8Ag4mWvXOWewvB+FEB9xtpKwI/SQfA==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERHWjVOzdRfPM1NY3KVCZBNSq+BM7
pkWaB59iqNSVjO5P/dvcd7YisP7z9M3p4yOKQwEQxek3/tBCfhNOPN0XJA==
-----END PUBLIC KEY-----