Repository navigation
Update Chainguard Actions overview for GA - #4029
Merged
matthewhelmke merged 8 commits intoOct 5, 2026
Merged
Chainguard Dev / Enforce - Commit Signing
succeeded
Oct 2, 2026 in 1s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71253492478156988387218150022230432669190811991 (0xc7b1dfab6095259b0f691f1a2fa2d20561b7157)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Oct 2 20:10:42 2026 UTC
Not After : Oct 2 20:20:42 2026 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
25:d7:f3:99:a8:f0:ab:f9:b6:8c:62:66:4a:1a:7d:
46:97:f2:a3:5c:3a:ae:e2:02:1b:a7:7a:ae:2e:55:
80:b6
Y:
cd:63:60:35:e5:ff:46:6a:37:3b:ae:9f:f1:ae:f8:
ab:1d:fb:6a:16:88:9d:d6:e3:5e:92:40:37:20:be:
06:98
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
7D:E5:CA:C6:52:A8:19:7D:48:5A:C5:88:BB:EF:57:5C:1A:DD:8D:9A
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:tyler.paxton@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Unknown extension 1.3.6.1.4.1.57264.1.24
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoP49j9MAAAQDAEcwRQIhAItgUP/mtocCb2JtazR0glksmOvYZllZw4itPQCDIBb/AiAMu+WpJnS3lSFaHYBr9PdPI02SNQizoeL00K5eV6aOZA==
Signature Algorithm: ECDSA-SHA384
30:66:02:31:00:ef:e1:08:29:8c:b7:c5:2a:e9:21:13:ba:04:
1e:12:17:64:e7:30:ce:4d:0b:84:29:c0:b2:fa:6d:23:3f:21:
5c:bd:30:89:c1:46:28:cb:03:20:d6:21:92:10:4f:de:3e:02:
31:00:b3:78:28:c1:19:03:c0:61:2b:c1:60:6e:79:bf:22:7e:
17:76:16:8f:56:3f:72:7c:4e:a3:1d:ab:f7:9a:59:7b:8a:10:
40:01:0a:fd:b2:d8:b1:5c:2c:01:ab:e8:95:2c
Rekor Entry
Details
{
"body": "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",
"integratedTime": 1790971843,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 3061316240,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2939419173\nPxi40EkjbG/asZ52pgLG0XGI1EHcJSl+mLdALFBbVQI=\n\n— rekor.sigstore.dev wNI9ajBFAiEAhHxMOZzRq0Dks3AuNi1E/0BiwV4Q6+kxtILULw9syoQCIHN7xU68oNM5A1FbjaaHkWjynN7MKT/vxkegBeT860IA\n",
"hashes": [
"ff3d1fad5a3da9d700e00faba5b2056a6b88479b76e3549cc491b61cd264135c",
"b9ab5f4fe492fbcd2e9a89d9595efdb404f8c9a2dbf4207e66d409fca3978ac1",
"ff03dc2a679df18a50f157000bc5bb2b1610dc89ee70a388edfd4b235af16dcd",
"894cda6575ca7f6fab5a124d9e857a9e4d48db0ce527bda9702bf8adc0598e85",
"1f98c2523ca0cbcdebd682f4080f05f5e33b984151616b030557ab5790a198a2",
"f48134644b900b15efa8acc2a2ae40bd1dd9403fc654be9606ffd6896f7fa45f",
"4a4f05e1712318828be16c0343bdd7ef8c457b3e4115354eb99563fea74f7e3e",
"cfcd4dfcc6e2116df7d9cfde2b01d588fe8639a8b15fbcbb65851b3575a25649",
"6c45e96fe68350adb99b841d4f50ea61241f61fd1504693f83afb9a299f933cc",
"16793d71a283298a4277bd597ec182a838e644f45df0bc30ad403793ec46257c",
"4ae0ff5482ac55078d4ced864efb780d2c1231609a40880873d3e79e426e6bb5",
"a560fd75cd92482b7e38db96f343a015cb1f071849092dcc32ec9ca1f63af72e",
"1fb95ef4ceab27a7fe114afbfce4a2a816c64cedab18bb07145729cf4e992bca",
"d7fd321a26e43457221693b7dd71ccc1296a102d1288f0ed514dcf991d57f3a1",
"676c348ab34c62f8f12ff5de18c91286117d91fa0a674da7c24222cbbe60f02c",
"a11de956890bcec80d2224dbc14f6c31024c87fbc3183d8202b32e6a2aa586b6",
"f503e1779e8285c804f3ce3e6be47935a81c94c698e7fd8b11f8fd14d6e8f5aa",
"9061ba6a9a0316a5ede4f15a9c1c21f3d593defb4c598d7facfc1ece1ac82d76",
"7d6a4ee29efa97cf4ce6292d8941d26f6851bc6ca6fea734c369640565bba7a4",
"a88ef283dd56bd2ac624c40cca53041701c10dad4a14bbdb31470786de19b06b",
"2542d469ea75412bce8944e6658335e1840ff2ed254cd33f84dd4e9ad761eeb2",
"cf70de2de9f3cec506052c271339c2461d533cbc0d52428eb72d3980b4e66f9f",
"e25624edc5fc3eccd92e8c903168cc0c1d413819f87fb85e86d1621e8f767b96",
"b6da717744c9a6b394b5bffc59fe43788cf036d530ef64346275c4d8b14c219a",
"ab1cc76a7033cf9ed20dd9897b407b6c92bbd8d4c805bc043060412af0ce44ec",
"c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
],
"logIndex": 2939411978,
"rootHash": "3f18b8d049236c6fdab19e76a602c6d17188d441dc25297e98b7402c505b5502",
"treeSize": 2939419173
},
"signedEntryTimestamp": "MEYCIQDldW/plOskpP1XjszDz/fXuvLzxAzdNvIF5/rVgHgwrgIhAJbRRNOH4mEGenypGqUgX5EBfR71Ze1CJ6m7Aperd8Ow"
}
}
Loading