fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6bbd333a22) #428

Merged
admin merged 1 commits from fix/prod-evidence-2026-09-29 into main 2026-11-02 12:56:59 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Vid verifiering den 2 november 2026 kördes produktionsimagen git.cloud.siax.io/sax3l/0pt:prod-2d68ce5016 (sha256:8844c1163fabb60d80761085922f26ed7b18df2f190d08035f61f0d0eef960df). Den är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-6bbd333a22 (sha256:7cbc75bb363c1ee47f8aa86cfbaf996e648e4a0c0c5c5f79a09b87fef93db03b) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEPANWhYKBu/ffKYQUvOjsubyaGcyw
2Z1Kg87xgz2HHg4oeyZfUWHU+PGL5VZhKbY93dHff+whRw0KKHkPwTaybQ==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELOI331jmeMp5t0XySt0ls4XH0Msr
2k7neTq+QtRAOuLL4b5Nj3xdHLpDBjaX82zI6XXbJRixh0TeWrp0Y0SF3Q==
-----END PUBLIC KEY-----