fix(signing): cosign-pubkey + SBOM + deployment/env-poster (2d68ce5016) #426

Merged
admin merged 2 commits from fix/prod-evidence-2026-09-29 into main 2026-11-02 09:45:50 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-4f5a2ea865 (sha256:4e2afd83389d61a31673a97a90962a38d18cbf12c35e8cd2b3fdf6c3cbe9bf62) är cosign-signerad
Vid verifiering den 2 november 2026 kördes produktionsimagen git.cloud.siax.io/sax3l/0pt:prod-2d68ce5016 (sha256:8844c1163fabb60d80761085922f26ed7b18df2f190d08035f61f0d0eef960df). Den är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEwNrAETFivagimW4jWWJUezFgvhqC
eUuv7eI3mmiEXuYcB1Uf4v2fv6EY5sgoGl/CY+4jFB2blu63a2gupNpOlQ==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEPANWhYKBu/ffKYQUvOjsubyaGcyw
2Z1Kg87xgz2HHg4oeyZfUWHU+PGL5VZhKbY93dHff+whRw0KKHkPwTaybQ==
-----END PUBLIC KEY-----