Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8debc77eaf)' (#177) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 5s
Security Scan (SIAX Cloud) / security (push) Successful in 20s
CI (SIAX Cloud) / security (push) Successful in 1m14s
CI (SIAX Cloud) / integration (push) Successful in 2m22s
CI (SIAX Cloud) / quality (push) Successful in 2m51s
CI (SIAX Cloud) / sonar (push) Successful in 2m53s
Deploy to Coolify / deploy (push) Successful in 4m43s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 5m30s

This commit was merged in pull request #177.
This commit is contained in:
2026-10-03 02:20:33 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-b8b63c429d (sha256:752de7ea90445e9cc822d21ef84cd7134585c55a6e9ccb32ac3601e80972e6f9) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-8debc77eaf (sha256:dfd2ef5046a0b89b64ae46dcbbe44180b3e514a57c399f3388e074860bc62192) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtHQlUb6zY5HpVt57cHXpewRX29Wk
//f7A6IlIhis188VhW8w5n6BBw9v1jdYOr+PDbm3IRkgpe+RXLDYaUl+OA==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqrQyxD8Dv05FEzgzy8857eWun9ef
B9Em5OuO7QOS+weV289xJ7AEd/k6LguScBzkVrs7xmg2ugpER6EYDSv13Q==
-----END PUBLIC KEY-----