From 508a2f34de68099b32105589912a953cb9906f10 Mon Sep 17 00:00:00 2001 From: siax-ci Date: Tue, 15 Sep 2026 03:45:04 +0000 Subject: [PATCH] chore(release-chain): evidence for sha-8be11b6485d3 [skip ci] --- .../release-8be11b6485d3-artifact.json | 12 ++++++++++++ .../release-8be11b6485d3-sbom.json | 12 ++++++++++++ .../release-8be11b6485d3-signature.json | 13 +++++++++++++ siax/source-bundles/release-8be11b6485d3.json | 9 +++++++++ 4 files changed, 46 insertions(+) create mode 100644 siax/production-evidence/release-8be11b6485d3-artifact.json create mode 100644 siax/production-evidence/release-8be11b6485d3-sbom.json create mode 100644 siax/production-evidence/release-8be11b6485d3-signature.json create mode 100644 siax/source-bundles/release-8be11b6485d3.json diff --git a/siax/production-evidence/release-8be11b6485d3-artifact.json b/siax/production-evidence/release-8be11b6485d3-artifact.json new file mode 100644 index 0000000..fc13620 --- /dev/null +++ b/siax/production-evidence/release-8be11b6485d3-artifact.json @@ -0,0 +1,12 @@ +{ + "id": "pe-artifact-8be11b6485d3", + "repo": "0pt", + "evidenceType": "artifact-digest", + "verifiedAt": "2026-09-15T03:45:04Z", + "verifiedBy": "gitea-ci", + "result": "pass", + "proofRef": "pushed git.cloud.siax.io/sax3l/0pt:sha-8be11b6485d3 to git.cloud.siax.io/sax3l/0pt", + "tool": "docker", + "sourceSha": "8be11b6485d3a3f88960af68e71d45d35735d1a8", + "digest": "sha256:5b890676933a8dd19c96d0ba3f00d19d1051b75fd6259ed1d5414782532eb822" +} diff --git a/siax/production-evidence/release-8be11b6485d3-sbom.json b/siax/production-evidence/release-8be11b6485d3-sbom.json new file mode 100644 index 0000000..dfc8c2e --- /dev/null +++ b/siax/production-evidence/release-8be11b6485d3-sbom.json @@ -0,0 +1,12 @@ +{ + "id": "pe-sbom-8be11b6485d3", + "repo": "0pt", + "evidenceType": "sbom", + "verifiedAt": "2026-09-15T03:45:04Z", + "verifiedBy": "gitea-ci", + "result": "pass", + "proofRef": "siax/_release-artifacts/sbom-8be11b6485d3.spdx.json", + "tool": "syft", + "sbomFormat": "spdx-json", + "digest": "sha256:5b890676933a8dd19c96d0ba3f00d19d1051b75fd6259ed1d5414782532eb822" +} diff --git a/siax/production-evidence/release-8be11b6485d3-signature.json b/siax/production-evidence/release-8be11b6485d3-signature.json new file mode 100644 index 0000000..5e42088 --- /dev/null +++ b/siax/production-evidence/release-8be11b6485d3-signature.json @@ -0,0 +1,13 @@ +{ + "id": "pe-signature-8be11b6485d3", + "repo": "0pt", + "evidenceType": "signature", + "verifiedAt": "2026-09-15T03:45:04Z", + "verifiedBy": "gitea-ci", + "result": "pass", + "proofRef": "cosign verify --key cosign.pub git.cloud.siax.io/sax3l/0pt@sha256:5b890676933a8dd19c96d0ba3f00d19d1051b75fd6259ed1d5414782532eb822 (verified in this same run)", + "tool": "cosign", + "signatureTool": "cosign", + "keyless": false, + "digest": "sha256:5b890676933a8dd19c96d0ba3f00d19d1051b75fd6259ed1d5414782532eb822" +} diff --git a/siax/source-bundles/release-8be11b6485d3.json b/siax/source-bundles/release-8be11b6485d3.json new file mode 100644 index 0000000..426f9ea --- /dev/null +++ b/siax/source-bundles/release-8be11b6485d3.json @@ -0,0 +1,9 @@ +{ + "id": "sb-release-8be11b6485d3", + "repo": "0pt", + "commitSha": "8be11b6485d3a3f88960af68e71d45d35735d1a8", + "branch": "main", + "buildId": "27317-1", + "artifactId": "git.cloud.siax.io/sax3l/0pt:sha-8be11b6485d3", + "producedAt": "2026-09-15T03:45:04Z" +}