Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (960e25e702)' (#336) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 9s
Security Scan (SIAX Cloud) / security (push) Failing after 19s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 19s
CI (SIAX Cloud) / integration (push) Successful in 27s
CI (SIAX Cloud) / security (push) Failing after 40s
CI (SIAX Cloud) / quality (push) Successful in 40s
CI (SIAX Cloud) / sonar (push) Successful in 52s
Deploy to Coolify / deploy (push) Failing after 9m57s

This commit was merged in pull request #336.
This commit is contained in:
2026-10-25 15:20:06 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-b541b69551 (sha256:c322a540fc14ae82a09651f711f001ede3a9446eba584e14c42b103b3a246c40) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-960e25e702 (sha256:3eb46385107c5f0094df01942c7f2e11ea1f8d79bc5dc667c63313cabdba970e) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE67oi8jFQGFjw0YCJcw9XAw9OvtBP
a+PqeerpTmJuRMyLHVtU9d4WPfJW4ieiTHCdewIlc1ZU1H4rJnVJVcrh9w==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsAgZSn7UoXCNZHbHNWMroOjdb1z0
61LH4VQsp/wiUxABTVCtPplEm5f3bGN4U8yo7tQvRgeZtL1DnYSvpHHT5A==
-----END PUBLIC KEY-----