admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix(signing): cosign-pubkey + SBOM + deployment/env-poster (a0e701efc8) #504

Merged
admin merged 1 commits from fix/prod-evidence-2026-09-29 into main 2026-11-07 23:21:22 +00:00
Conversation 0 Commits 1 Files Changed 8
+4 -59
8 changed files with 4 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
siax/production-evidence/pe-artifact-0pt-13e156ec7e6b.json
-12
View File
@@ -1,12 +0,0 @@
{
"id": "pe-artifact-0pt-13e156ec7e6b",
"repo": "0pt",
"evidenceType": "artifact-digest",
"result": "pass",
"verifiedAt": "2026-11-04T10:53:16Z",
"verifiedBy": "docker image inspect RepoDigests (real registry digest)",
"proofRef": "docker://server6 image shxd6lepxuxfsjsp0ath3z1g:13e156ec7e6be534de9c28d28ec2daff0355ca7f image@sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089",
"sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
"digest": "sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089",
"tool": "docker"
}
siax/production-evidence/pe-ci-0pt-13e156ec7e6b.json
-10
View File
@@ -1,10 +0,0 @@
{
"id": "pe-ci-0pt-13e156ec7e6b",
"repo": "0pt",
"evidenceType": "deploy-log",
"result": "pass",
"verifiedAt": "2026-11-04T10:53:16Z",
"verifiedBy": "Coolify deployment record (application_deployment_queues, status=finished)",
"proofRef": "coolify://server6/shxd6lepxuxfsjsp0ath3z1g finished 2026-11-04 05:42:18",
"sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f"
}
siax/production-evidence/pe-running-0pt-13e156ec7e6b.json
-11
View File
@@ -1,11 +0,0 @@
{
"id": "pe-running-0pt-13e156ec7e6b",
"repo": "0pt",
"evidenceType": "running-digest",
"result": "pass",
"verifiedAt": "2026-11-04T10:53:16Z",
"verifiedBy": "docker inspect (running container image digest)",
"proofRef": "docker://server6 container/shxd6lepxuxfsjsp0ath3z1g-20261104T093337 image@sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089",
"sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
"digest": "sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089"
}
siax/production-evidence/pe-sbom-0pt-13e156ec7e6b.json
-12
View File
@@ -1,12 +0,0 @@
{
"id": "pe-sbom-0pt-13e156ec7e6b",
"repo": "0pt",
"evidenceType": "sbom",
"result": "pass",
"verifiedAt": "2026-11-04T09:29:06Z",
"verifiedBy": "syft (estate-kampanj issue #76, skannad vid deployad commit)",
"proofRef": "siax/sbom/sbom-0pt-13e156ec7e6b.json",
"sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
"tool": "syft",
"sbomFormat": "cyclonedx-json"
}
siax/sbom/sbom-0pt-2026-09-29.json
+1 -1
View File
File diff suppressed because one or more lines are too long
siax/signing/README.md
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-ef84832cdb (sha256:a8e2ebc09bafe1f0d198f72bda700f9b826ac80c7a72f0d21879d851c30dbb1d) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-a0e701efc8 (sha256:150971f71f768885812828da05b4f593e18c0b2759284b0ee3f820cedd3fc8db) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
siax/signing/cosign.pub
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6Cdqn5WinLh2POoCPzroqb2Tz0Jw
W+vJqjfc1+UybkeU9NZkamkDgCWunNHSn4gGmAyrZpZ8wQqxK35cBhwNeA==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEv7xDAdWCIzHM9jZTiQOJ5GpupqR0
cAzsjktfBPUPLN6CHgGqGVPCXrADwWqHKPF7PMiRZnrFev+S5kYTtpssOQ==
-----END PUBLIC KEY-----
siax/source-bundles/sb-0pt-13e156ec7e6b.json
-10
View File
@@ -1,10 +0,0 @@
{
"$schema": "https://git.siax.io/sax3l/siax-standard/raw/branch/main/schema/siax.source-bundle.schema.json",
"id": "sb-0pt-13e156ec7e6b",
"repo": "0pt",
"commitSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
"branch": "main",
"buildId": "coolify:0pt",
"producedAt": "2026-11-04T01:26:48Z",
"artifactId": "shxd6lepxuxfsjsp0ath3z1g@sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089"
}