Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (d802e451f1)' (#398) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / integration (push) Successful in 35s
Security Scan (SIAX Cloud) / security (push) Failing after 40s
CI (SIAX Cloud) / security (push) Failing after 41s
CI (SIAX Cloud) / quality (push) Successful in 1m29s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m28s
CI (SIAX Cloud) / sonar (push) Successful in 1m31s
Deploy to Coolify / deploy (push) Successful in 1m52s

This commit was merged in pull request #398.
This commit is contained in:
2026-11-01 06:55:38 +00:00
3 changed files with 4 additions and 5 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-793b72fbf5 (sha256:e7993b80c5fa7cd7598496832b4bc0fa82ea1a3a60d7ddb3168394543f4fdc29) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-d802e451f1 (sha256:0d9eb93b54203216c17fdf52c4f391024a066fdc041aa3cccfbbf75d720087f1) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEseNcbpr+ACTA7mlNa8fFV4zEOn83
uQX2eOC2WjLkpYiAyruMOfYw1uEbIL9lSJI7l+xgcTzLOJDTyD4tMAbYJw==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4b/DHjJHfRN2wMYnt1iNtFbODovF
OfX267+QTH7dCBE6t9xJWmAImXtjcDUjTScaDE9meTcQKv0HxpvYoJAHWA==
-----END PUBLIC KEY-----