Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4403908e0a)' (#408) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 4s
CI (SIAX Cloud) / quality (push) Successful in 43s
CI (SIAX Cloud) / security (push) Successful in 30s
CI (SIAX Cloud) / integration (push) Successful in 39s
Security Scan (SIAX Cloud) / security (push) Successful in 17s
CI (SIAX Cloud) / sonar (push) Successful in 1m47s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m10s
Deploy to Coolify / deploy (push) Successful in 2m54s

This commit was merged in pull request #408.
This commit is contained in:
2026-11-01 22:58:58 +00:00
3 changed files with 5 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-4725b22b19 (sha256:bb7497faf342f8051aee23b8593e2aacd3427efc78b8f26759213ea7d5f8263f) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-4403908e0a (sha256:343f307f52fd4857d3051cffdb8689d3102e3f63e797981da0f0dc6dde2db505) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEvZInQ84Wlu8uaR036fi//llFRHOO
iWE68lErJ8J9JpTrRVoJRYC8EFKcv3llX3pRmDOwk9cmlPsGVP16ho0O4A==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE45V2/PKSEGbZfMeKw5D9RsMKv1mn
V+9O+oFX3Zwf6+FLn7sGa2NSfB6tFHcR8/I+6KPozTuLROt3Q3XlRY9x8w==
-----END PUBLIC KEY-----