Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (c04ba4dc7b)' (#379) from fix/prod-evidence-2026-09-29 into main
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 1m16s
Deploy to Coolify / deploy (push) Failing after 10m39s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / integration (push) Skipped
CI (SIAX Cloud) / sonar (push) Skipped
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / security (pull_request) Failing after 22s
Security Scan (SIAX Cloud) / security (push) Failing after 22s
CI (SIAX Cloud) / security (push) Failing after 26s
CI (SIAX Cloud) / quality (pull_request) Failing after 34s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 50s
masterplan-lock / check (push) Successful in 50s
CI (SIAX Cloud) / integration (pull_request) Successful in 59s
CI (SIAX Cloud) / quality (push) Failing after 1m16s

This commit was merged in pull request #379.
This commit is contained in:
2026-10-30 16:38:16 +00:00
3 changed files with 5 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-bfa0513f76 (sha256:e83b70f68cf03bff01052d531270677b1571628e23070bea4c1283db4134bc3a) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-c04ba4dc7b (sha256:53d99c3a9fb7e25cdccff52b56ce81f9a2f2fe1da036df902bdf07ed2018f36c) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEF4fTXYpbB/dkKrspiO4XujGxuoLh
BKT/uixdH2x2Z50WzBxWWSbMU2FjZpNvK3b8sYHM1h3bD+Bpn/NDhPPPVw==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEPOnX7xTWuzpf6EWr9BPBh1Fi/Eic
bVUDSAfVnHj/bUNUbVXAjSm29apjo40lUZHXoNv17PBjp3KhqeSnMI+2Tw==
-----END PUBLIC KEY-----