Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (e984376669)' (#316) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 6s
Security Scan (SIAX Cloud) / security (push) Failing after 16s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 20s
CI (SIAX Cloud) / security (push) Failing after 38s
CI (SIAX Cloud) / integration (push) Successful in 51s
CI (SIAX Cloud) / quality (push) Successful in 1m40s
CI (SIAX Cloud) / sonar (push) Successful in 2m0s
Deploy to Coolify / deploy (push) Failing after 10m32s

This commit was merged in pull request #316.
This commit is contained in:
2026-10-23 22:20:39 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-c81fdcbc7c (sha256:681c0f8dd98fa642a271dff41502a5128edb9a376d698a0b48530af7448580b2) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-e984376669 (sha256:c3d7bb064af82ec6def8c2063f0147e1874fb3f9bf88790ab9191512a87ec18b) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIKl3wkA9Jh+Uvl+R17f39wuXOK5V
rbuPt0JN0ru9whMMYmuCXXy4bvR2NKX7h6Czu/4YdZCftqul8zm0QLohIg==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELktpTa3T8h3wRkh/dl4qQ5Qpjjw8
Ug6q0uVelXl+76QQ1hkte73/pqFs+yT+FV8H0RT8E5kDdKQblhZOUPnd6A==
-----END PUBLIC KEY-----