From 8e5fa88b54b09e8943060a162873aea4cdadbf86 Mon Sep 17 00:00:00 2001 From: siax-ci Date: Tue, 15 Sep 2026 12:39:15 +0000 Subject: [PATCH] chore(release-chain): evidence for sha-6a125e10ccc3 [skip ci] --- .../release-6a125e10ccc3-artifact.json | 12 ++++++++++++ .../release-6a125e10ccc3-sbom.json | 12 ++++++++++++ .../release-6a125e10ccc3-signature.json | 13 +++++++++++++ siax/source-bundles/release-6a125e10ccc3.json | 9 +++++++++ 4 files changed, 46 insertions(+) create mode 100644 siax/production-evidence/release-6a125e10ccc3-artifact.json create mode 100644 siax/production-evidence/release-6a125e10ccc3-sbom.json create mode 100644 siax/production-evidence/release-6a125e10ccc3-signature.json create mode 100644 siax/source-bundles/release-6a125e10ccc3.json diff --git a/siax/production-evidence/release-6a125e10ccc3-artifact.json b/siax/production-evidence/release-6a125e10ccc3-artifact.json new file mode 100644 index 0000000..78d4f0a --- /dev/null +++ b/siax/production-evidence/release-6a125e10ccc3-artifact.json @@ -0,0 +1,12 @@ +{ + "id": "pe-artifact-6a125e10ccc3", + "repo": "0pt", + "evidenceType": "artifact-digest", + "verifiedAt": "2026-09-15T12:39:15Z", + "verifiedBy": "gitea-ci", + "result": "pass", + "proofRef": "pushed git.cloud.siax.io/sax3l/0pt:sha-6a125e10ccc3 to git.cloud.siax.io/sax3l/0pt", + "tool": "docker", + "sourceSha": "6a125e10ccc3bc9d9d6610154f40469a169d4cf3", + "digest": "sha256:a6f3ed9cf32fc94f292c564bf115aa70241a440245d68271ac018ec9378323ff" +} diff --git a/siax/production-evidence/release-6a125e10ccc3-sbom.json b/siax/production-evidence/release-6a125e10ccc3-sbom.json new file mode 100644 index 0000000..a62c4dc --- /dev/null +++ b/siax/production-evidence/release-6a125e10ccc3-sbom.json @@ -0,0 +1,12 @@ +{ + "id": "pe-sbom-6a125e10ccc3", + "repo": "0pt", + "evidenceType": "sbom", + "verifiedAt": "2026-09-15T12:39:15Z", + "verifiedBy": "gitea-ci", + "result": "pass", + "proofRef": "siax/_release-artifacts/sbom-6a125e10ccc3.spdx.json", + "tool": "syft", + "sbomFormat": "spdx-json", + "digest": "sha256:a6f3ed9cf32fc94f292c564bf115aa70241a440245d68271ac018ec9378323ff" +} diff --git a/siax/production-evidence/release-6a125e10ccc3-signature.json b/siax/production-evidence/release-6a125e10ccc3-signature.json new file mode 100644 index 0000000..9efc5b3 --- /dev/null +++ b/siax/production-evidence/release-6a125e10ccc3-signature.json @@ -0,0 +1,13 @@ +{ + "id": "pe-signature-6a125e10ccc3", + "repo": "0pt", + "evidenceType": "signature", + "verifiedAt": "2026-09-15T12:39:15Z", + "verifiedBy": "gitea-ci", + "result": "pass", + "proofRef": "cosign verify --key cosign.pub git.cloud.siax.io/sax3l/0pt@sha256:a6f3ed9cf32fc94f292c564bf115aa70241a440245d68271ac018ec9378323ff (verified in this same run)", + "tool": "cosign", + "signatureTool": "cosign", + "keyless": false, + "digest": "sha256:a6f3ed9cf32fc94f292c564bf115aa70241a440245d68271ac018ec9378323ff" +} diff --git a/siax/source-bundles/release-6a125e10ccc3.json b/siax/source-bundles/release-6a125e10ccc3.json new file mode 100644 index 0000000..d86b6b8 --- /dev/null +++ b/siax/source-bundles/release-6a125e10ccc3.json @@ -0,0 +1,9 @@ +{ + "id": "sb-release-6a125e10ccc3", + "repo": "0pt", + "commitSha": "6a125e10ccc3bc9d9d6610154f40469a169d4cf3", + "branch": "main", + "buildId": "28224-1", + "artifactId": "git.cloud.siax.io/sax3l/0pt:sha-6a125e10ccc3", + "producedAt": "2026-09-15T12:39:15Z" +}