fix(pipeline): do preliminary checks for checksum invalid chars #1659
Chainguard Enforce / Enforce - Commit Signing
succeeded
Nov 19, 2024 in 1s
Successfully verified commit signature.
CLAIM | DESCRIPTION | |
---|---|---|
✅ | Found Git signature | |
✅ | Validated Git signature | |
✅ | Validated Rekor entry | |
✅ | Allowed by policy |
Details
Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650124634185149745445414997504685700358530880510 (0x71e098cb09a1c00e580518b1252117654c9753fe)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Nov 19 10:51:52 2024 UTC
Not After : Nov 19 11:01:52 2024 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
ea:3a:25:82:53:0a:90:b2:bb:7d:f0:bf:ac:c1:af:
f9:99:62:c6:16:76:40:78:d5:5e:9a:75:12:1d:80:
b3:f7
Y:
56:2c:4b:d2:cc:6c:41:79:2d:78:b7:a2:c6:d1:3d:
61:21:13:54:b2:d2:6b:5f:b3:9e:54:c9:b8:7d:3b:
e0:8d
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
80:B1:16:70:FF:27:57:60:CD:38:43:7E:C3:D9:72:87:BC:97:38:C2
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:luca.dimaio@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABk0QM140AAAQDAEcwRQIgSJmHeeeS35Rj4hpvDJXJJ3IiothI2My8JSjWXIBnt34CIQCLVPAqskqbUswKXTjG/nTBn4ZcM4RdKO9g94JC8uWL1Q==
Signature Algorithm: ECDSA-SHA384
30:66:02:31:00:a6:0d:c8:2a:78:db:21:d6:04:ab:6c:bb:60:
d6:bf:2d:50:6a:4b:cb:63:ee:d3:a3:2f:12:ef:cc:30:2c:62:
54:ed:dc:8f:23:05:83:eb:4e:93:a3:e1:13:64:52:85:5d:02:
31:00:82:d3:55:bb:a1:84:8a:b7:82:cb:b2:18:cd:78:86:32:
f4:8c:fb:57:17:5b:24:87:3c:1c:be:47:a5:6c:ea:ac:45:38:
0d:5a:7c:b4:1d:2d:f4:a1:b6:1d:a4:4c:b4:2d
Rekor Entry
{
"body": "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",
"integratedTime": 1732013513,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 149767872,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n27865696\nGYnWTKrgVezODUE4X0dik6ZzOuDxy3eMIdzYS7wI5VI=\n\n— rekor.sigstore.dev wNI9ajBFAiEAiUb5k1gDnhoUTJWuv7W6JhOfP+sFuF9hvdEn7pbu4EACICMDUd7c906qm8fdZUprddZrE0w4e0zyGE4FbSvj3W3v\n",
"hashes": [
"7ff2243b8eec3ee98a9eafe684e275ba4c1c21f09f367e6730469d7cfdc970ee",
"c706c7579ad785519b26f3318626bfec3a4132cec08ef3d4d9c42177e56cb5c5",
"2b5f9347dcd81bb518051d97154f02816d63cf5a315bdd8888a6296ad3f47da4",
"65199d6129b089002dfac7f911242f683c1fd5af090da5177f1f06de52e850e2",
"138b967ba0470a95c35e0018597260b96a7cc00c0b3dc87a2eff771b37a8cce2",
"05c20eb1696e0d372e2d6cb959840739a4cd37a82db719088d2a1d57045e4c80",
"e714dab3ab4b72b5c3f16f834099ca15c363553e725912f890139369048e10fd",
"aa8e4646210f4a800b75c66ebf4355e75721f55f51e05e20aca9feccaababf9c",
"787861b67c925e4d94980ca3e28d3462aea3aa20d6aa34e30e2fa82c091f9f52",
"b6f881c8c93a56f8912194960b7e27e2e10ee9d244320cfbdbd23a4f7e5cf68f",
"669d413090c0d272ded18a59e7d339f2282dce70e4542444a53f7a7a1fe50d45",
"4b9d24eae9bcdd23d4d2abfa64aa91f2366ff478c55031381dc5f11e0c5c6fc5",
"8c0d0b932455d7076e5b0631f07765a8c51f056f84528557cbedea0806df2278",
"a208a3c0b141f6d44100ef710600c826e572ae9fbda6f744a350b40687dc18e9",
"140562ae0cb6df1ec420c52e130cf1bd1a14d4ba0ca98fa9f87f29ff50e4e769",
"1dd8e2617f0b03d0b0c030f34b2ecbc023245cbc0061076f6086f1127ef0c0eb",
"136acb3983c914a8a2cd88b2bb4ed02ea90c55354bee2d99817890cb0748f4a4",
"e25505d183aef579080d7297034c0c4b377a55e0d8dd3640826a0e796992dbe6",
"81ffbd9b9e760773e79169ced28e0a755be3713dd65472eb09b7f50e8558285c"
],
"logIndex": 27863610,
"rootHash": "1989d64caae055ecce0d41385f476293a6733ae0f1cb778c21dcd84bbc08e552",
"treeSize": 27865696
},
"signedEntryTimestamp": "MEQCIEwgznNccw3mEpY6m+FrJywXTietH5d53ax1WU9G4WFYAiBNpcQK/cVbT9ZhFaZA1mCmZCU4Fnq0JK3KAvQMVL6hTw=="
}
}
Loading