Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (11bd38bdd6)' (#375) from fix/prod-evidence-2026-09-29 into main
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 1m39s
Deploy to Coolify / deploy (push) Failing after 11m39s
CI (SIAX Cloud) / integration (push) Skipped
CI (SIAX Cloud) / sonar (push) Skipped
masterplan-lock / check (push) Successful in 7s
Security Scan (SIAX Cloud) / security (push) Failing after 26s
CI (SIAX Cloud) / security (push) Failing after 37s
CI (SIAX Cloud) / quality (push) Successful in 1m19s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / security (pull_request) Failing after 52s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 53s
CI (SIAX Cloud) / integration (pull_request) Successful in 58s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m20s

This commit was merged in pull request #375.
This commit is contained in:
2026-10-30 09:16:48 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-774ba6593b (sha256:300a3eac038569cc69144a07c90fd6fbaa23d1ad37d482574b654c89321a751e) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-11bd38bdd6 (sha256:edc26f0a757ae311d63af05159de54497b735ff72d949bbd6c22e58a1e1ccd5d) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYr+pppRBl8CJrgnoKrlfbK/BTbSC
rBGAwvclpgun3xfd9eXk0L+/HFv9YDRorbjQMf8dYccYdYWBV3pZKM8Khw==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbaGPfpahjepu0OGOjEzlRvKKCjXj
x2DBSdt32js44z+a6gnOTOEpSHvwwPTV0nGi9SYRoxQQxbFxljr1KrqjjQ==
-----END PUBLIC KEY-----