Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (28390268fd)' (#246) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 15s
Security Scan (SIAX Cloud) / security (push) Failing after 37s
CI (SIAX Cloud) / security (push) Failing after 39s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 40s
CI (SIAX Cloud) / quality (push) Successful in 1m34s
CI (SIAX Cloud) / integration (push) Successful in 2m6s
CI (SIAX Cloud) / sonar (push) Successful in 2m9s
Deploy to Coolify / deploy (push) Failing after 10m5s

This commit was merged in pull request #246.
This commit is contained in:
2026-10-18 02:20:03 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-5214cf4005 (sha256:e20becd0a22b883b09ed88952c74d7a2004fe31756c09a43a15434cd61fdbb92) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-28390268fd (sha256:a5169a7a16d9005c90b3ec4c57f1c7e59a22749966c49429f07dd2af619e8486) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEMAS3mh3Arbuf3c1tYtnMyL1rq4Y4
CGSJwNqItvi7qHojbgVvzARzM8H98OeDlJR/q6CImw6D1T8KjvFisplgZQ==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEabg+bRnLZVOVDy7rKpBixxwpqRsa
CHL9MpBiChg4iu+NNR+hC22pl02Myi6lImSR4ztHrg87yaOIOR9bUFPsBQ==
-----END PUBLIC KEY-----