Skip to content

Update Chainguard Actions overview for GA - #4029

Merged
matthewhelmke merged 8 commits into
chainguard-dev:mainfrom
matthewhelmke:actions-doc-updates-for-GA
Oct 5, 2026
Merged

matthewhelmke merged 8 commits into
chainguard-dev:mainfrom
matthewhelmke:actions-doc-updates-for-GA

Correct the telemetry hook description for composite and Docker actions

06e9e99
Select commit
Loading
Failed to load commit list.
Chainguard Dev / Enforce - Commit Signing succeeded Oct 2, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
✅ Found Git signature
✅ Validated Git signature
✅ Validated Rekor entry
✅ Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71253492478156988387218150022230432669190811991 (0xc7b1dfab6095259b0f691f1a2fa2d20561b7157)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Oct 2 20:10:42 2026 UTC
            Not After : Oct 2 20:20:42 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    25:d7:f3:99:a8:f0:ab:f9:b6:8c:62:66:4a:1a:7d:
                    46:97:f2:a3:5c:3a:ae:e2:02:1b:a7:7a:ae:2e:55:
                    80:b6
                Y:
                    cd:63:60:35:e5:ff:46:6a:37:3b:ae:9f:f1:ae:f8:
                    ab:1d:fb:6a:16:88:9d:d6:e3:5e:92:40:37:20:be:
                    06:98
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                7D:E5:CA:C6:52:A8:19:7D:48:5A:C5:88:BB:EF:57:5C:1A:DD:8D:9A
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:tyler.paxton@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoP49j9MAAAQDAEcwRQIhAItgUP/mtocCb2JtazR0glksmOvYZllZw4itPQCDIBb/AiAMu+WpJnS3lSFaHYBr9PdPI02SNQizoeL00K5eV6aOZA==

    Signature Algorithm: ECDSA-SHA384
         30:66:02:31:00:ef:e1:08:29:8c:b7:c5:2a:e9:21:13:ba:04:
         1e:12:17:64:e7:30:ce:4d:0b:84:29:c0:b2:fa:6d:23:3f:21:
         5c:bd:30:89:c1:46:28:cb:03:20:d6:21:92:10:4f:de:3e:02:
         31:00:b3:78:28:c1:19:03:c0:61:2b:c1:60:6e:79:bf:22:7e:
         17:76:16:8f:56:3f:72:7c:4e:a3:1d:ab:f7:9a:59:7b:8a:10:
         40:01:0a:fd:b2:d8:b1:5c:2c:01:ab:e8:95:2c

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1790971843,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 3061316240,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2939419173\nPxi40EkjbG/asZ52pgLG0XGI1EHcJSl+mLdALFBbVQI=\n\n— rekor.sigstore.dev wNI9ajBFAiEAhHxMOZzRq0Dks3AuNi1E/0BiwV4Q6+kxtILULw9syoQCIHN7xU68oNM5A1FbjaaHkWjynN7MKT/vxkegBeT860IA\n",
      "hashes": [
        "ff3d1fad5a3da9d700e00faba5b2056a6b88479b76e3549cc491b61cd264135c",
        "b9ab5f4fe492fbcd2e9a89d9595efdb404f8c9a2dbf4207e66d409fca3978ac1",
        "ff03dc2a679df18a50f157000bc5bb2b1610dc89ee70a388edfd4b235af16dcd",
        "894cda6575ca7f6fab5a124d9e857a9e4d48db0ce527bda9702bf8adc0598e85",
        "1f98c2523ca0cbcdebd682f4080f05f5e33b984151616b030557ab5790a198a2",
        "f48134644b900b15efa8acc2a2ae40bd1dd9403fc654be9606ffd6896f7fa45f",
        "4a4f05e1712318828be16c0343bdd7ef8c457b3e4115354eb99563fea74f7e3e",
        "cfcd4dfcc6e2116df7d9cfde2b01d588fe8639a8b15fbcbb65851b3575a25649",
        "6c45e96fe68350adb99b841d4f50ea61241f61fd1504693f83afb9a299f933cc",
        "16793d71a283298a4277bd597ec182a838e644f45df0bc30ad403793ec46257c",
        "4ae0ff5482ac55078d4ced864efb780d2c1231609a40880873d3e79e426e6bb5",
        "a560fd75cd92482b7e38db96f343a015cb1f071849092dcc32ec9ca1f63af72e",
        "1fb95ef4ceab27a7fe114afbfce4a2a816c64cedab18bb07145729cf4e992bca",
        "d7fd321a26e43457221693b7dd71ccc1296a102d1288f0ed514dcf991d57f3a1",
        "676c348ab34c62f8f12ff5de18c91286117d91fa0a674da7c24222cbbe60f02c",
        "a11de956890bcec80d2224dbc14f6c31024c87fbc3183d8202b32e6a2aa586b6",
        "f503e1779e8285c804f3ce3e6be47935a81c94c698e7fd8b11f8fd14d6e8f5aa",
        "9061ba6a9a0316a5ede4f15a9c1c21f3d593defb4c598d7facfc1ece1ac82d76",
        "7d6a4ee29efa97cf4ce6292d8941d26f6851bc6ca6fea734c369640565bba7a4",
        "a88ef283dd56bd2ac624c40cca53041701c10dad4a14bbdb31470786de19b06b",
        "2542d469ea75412bce8944e6658335e1840ff2ed254cd33f84dd4e9ad761eeb2",
        "cf70de2de9f3cec506052c271339c2461d533cbc0d52428eb72d3980b4e66f9f",
        "e25624edc5fc3eccd92e8c903168cc0c1d413819f87fb85e86d1621e8f767b96",
        "b6da717744c9a6b394b5bffc59fe43788cf036d530ef64346275c4d8b14c219a",
        "ab1cc76a7033cf9ed20dd9897b407b6c92bbd8d4c805bc043060412af0ce44ec",
        "c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
      ],
      "logIndex": 2939411978,
      "rootHash": "3f18b8d049236c6fdab19e76a602c6d17188d441dc25297e98b7402c505b5502",
      "treeSize": 2939419173
    },
    "signedEntryTimestamp": "MEYCIQDldW/plOskpP1XjszDz/fXuvLzxAzdNvIF5/rVgHgwrgIhAJbRRNOH4mEGenypGqUgX5EBfR71Ze1CJ6m7Aperd8Ow"
  }
}