Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (01fcfe497c)' (#306) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 4s
Security Scan (SIAX Cloud) / security (push) Failing after 39s
CI (SIAX Cloud) / integration (push) Successful in 46s
CI (SIAX Cloud) / quality (push) Successful in 47s
CI (SIAX Cloud) / sonar (push) Successful in 1m14s
CI (SIAX Cloud) / security (push) Failing after 1m19s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 4m39s
Deploy to Coolify / deploy (push) Failing after 13m58s

This commit was merged in pull request #306.
This commit is contained in:
2026-10-23 02:35:56 +00:00
3 changed files with 4 additions and 4 deletions
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -1,4 +1,4 @@
# 0pt — cosign-signeringskedjan (2026-09-29)
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-1d16f64b8f (sha256:9eed0e8e48315e97d64b787e5b67eb88f0441d88ec99a9243487c4c05ab2309e) är cosign-signerad
Prod-imagen git.cloud.siax.io/sax3l/0pt:prod-01fcfe497c (sha256:4a18158fbaf3ebdf40afecde832781b82d16e9d60812e93baf5d6fe32db2811a) är cosign-signerad
med nyckelparet vars pubkey ligger här. Privata nyckeln raderad efter signering.
+2 -2
View File
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE+9KUodXuspeMKkD8zNyLlqED8ZLv
SD+f1yce3CDd7wgrUme7SIzxz+cei1eYFB0P0hLYMwEAieh7V4zM7ba4rQ==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE20IyzicoN9SCOSlOOnvEefkMn0DY
5bWOG0z3ujQ4IWJj8ChT4sMrrI35tL7LlMh9IyJ6AEQCu3wgUpwD98Xr5A==
-----END PUBLIC KEY-----