Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (d66dd14fb2)' (#248) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 9s
Security Scan (SIAX Cloud) / security (push) Failing after 12s
CI (SIAX Cloud) / security (push) Failing after 56s
CI (SIAX Cloud) / integration (push) Failing after 1m20s
CI (SIAX Cloud) / quality (push) Successful in 1m49s
CI (SIAX Cloud) / sonar (push) Successful in 2m7s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 4m11s
Deploy to Coolify / deploy (push) Failing after 15m37s

This commit was merged in pull request #248.
This commit is contained in:
2026-10-18 06:27:40 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-28390268fd (sha256:a5169a7a16d9005c90b3ec4c57f1c7e59a22749966c49429f07dd2af619e8486) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-d66dd14fb2 (sha256:583063aa1d7cbe3043dfec2835a17049ae907d8d32fcbc6154205ed53663b990) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEabg+bRnLZVOVDy7rKpBixxwpqRsa
CHL9MpBiChg4iu+NNR+hC22pl02Myi6lImSR4ztHrg87yaOIOR9bUFPsBQ==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFHjHBZHIf3JI+bFO0bXfyIL/moG8
sbleb4JiX3PrIyKZFuLAbV45d6jLKsOIvbdjw7zIHOdRZCpuYcbkNicW+g==
-----END PUBLIC KEY-----