Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (419c2d3f18)' (#518) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 4s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 8s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 8s
Security Scan (SIAX Cloud) / security (push) Failing after 8s
CI (SIAX Cloud) / quality (push) Failing after 9s
CI (SIAX Cloud) / security (push) Failing after 15s
CI (SIAX Cloud) / integration (push) Canceled after 16s
CI (SIAX Cloud) / sonar (push) Canceled after 15s
Deploy to Coolify / deploy (push) Failing after 1m30s

This commit was merged in pull request #518.
This commit is contained in:
2026-11-09 07:50:23 +00:00
3 changed files with 4 additions and 5 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-ebfa17028d (sha256:9eee31118f9fba203c3f3149ab009e6b795c4069773f948bb80a7f1cb336bca8) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-419c2d3f18 (sha256:1e9ccc9a86d49d45959b887a08eaf568944ffe323dddd7c53c5102f1638119a0) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEx0qVZ2Azsmfcyru0zGQ6WHaOEg3F
/fni6n9JQ4WE/ym5fPIwthCj0aSmEllSaVa4xedY5NCZThUeKOOShUJltg==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/hIaEnKH8ZEoy9KSERmUM/DhXsi7
KQSDCjSA7QNiFc2eGGr7NjKfhqpG+WwlP6DKm6mbZBFFWfFYwpTgv3kIzQ==
-----END PUBLIC KEY-----