Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (0f67507b89)' (#383) from fix/prod-evidence-2026-09-29 into main
CI (SIAX Cloud) / sonar (push) Failing after 10s
masterplan-lock / check (push) Successful in 11s
CI (SIAX Cloud) / security (push) Failing after 56s
Security Scan (SIAX Cloud) / security (push) Failing after 1m43s
CI (SIAX Cloud) / quality (push) Failing after 2m22s
CI (SIAX Cloud) / integration (push) Successful in 2m25s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 3m15s
Deploy to Coolify / deploy (push) Failing after 14m0s

This commit was merged in pull request #383.
This commit is contained in:
2026-10-31 03:30:17 +00:00
3 changed files with 5 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-ae9b16ecd4 (sha256:0f96b0397f3e13de63c99085adee2acf8e31756d27a0fcc73cf5fac87c04d193) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-0f67507b89 (sha256:bd9f3fd3be95c0c303d56d09d199205117a25c0c1cd578409fa3422de58a9428) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEC0xHylullU5Ib7ebvbZrLDYj9q7s
r4dWDCuohGpjNjuKzB5MHuPYxBK2dtcFyGQLm2AhyMvoh5g+evgHzmYQvg==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE769UPsT53fYwYljY4SG0jsjJNBA2
NV6tzqH5hVuO2PQKqE4Nf6MRkp2cl7KbPepVF2aAwie3RnP/QXDCL3K+Cg==
-----END PUBLIC KEY-----