image-copy-ecr: avoid spammy misleading error log when pushing to cgr.dev #210
Chainguard Enforce / Enforce - Commit Signing
succeeded
Aug 22, 2024 in 0s
Successfully verified commit signature.
CLAIM | DESCRIPTION | |
---|---|---|
✅ | Found Git signature | |
✅ | Validated Git signature | |
✅ | Validated Rekor entry | |
✅ | Allowed by policy |
Details
Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310590422437081998967480435328655970994821992907 (0x36675b317c59be145673e5ca154d1dda6b5311cb)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Aug 22 15:01:14 2024 UTC
Not After : Aug 22 15:11:14 2024 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
3c:98:12:3c:ec:b5:d4:c2:a0:da:1e:6c:8e:5e:3e:
38:9a:b1:af:76:74:0f:fc:06:66:d1:e2:b7:c9:4e:
a6:c1
Y:
93:66:7c:ae:99:16:b2:76:a8:d3:a0:6f:dc:dd:53:
90:1c:20:93:71:b2:64:79:f6:42:ca:d6:af:53:2e:
36:96
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
CB:00:A3:E9:A1:01:AB:4A:84:8B:9B:C3:6F:B4:98:83:7A:CE:EE:14
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:jason@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABkXqbKfEAAAQDAEYwRAIgK1Wl95jDGo6H5543Nt2IdhhMS1A9impy7NtBx3A8UvICICWyBR89Tc9geuU0oUmQ9pIH/fT0/zPLdAzvrqa8fQP7
Signature Algorithm: ECDSA-SHA384
30:65:02:30:7a:14:e2:b7:b7:2a:a1:41:db:e7:19:04:70:da:
c9:5d:02:5c:27:4a:37:7f:fc:1f:fb:de:84:b2:e4:e7:64:73:
a6:ab:08:84:40:b3:26:b7:d6:73:17:8d:e1:bc:74:90:02:31:
00:f9:62:b5:57:12:cc:ff:36:19:21:0e:e5:28:c9:08:a4:4c:
28:84:ba:07:b7:3d:a9:e2:c7:a5:49:e6:ad:89:b0:86:d9:9a:
86:f1:5d:ec:1a:d2:92:16:c4:29:91:52:28
Rekor Entry
{
"body": "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",
"integratedTime": 1724338875,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 123867167,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1964992\nwhz0UPbdQqWQOdvkbslBJwuCQlkZ1DwOn8LfqknBXHE=\n\n— rekor.sigstore.dev wNI9ajBFAiEAwIX4WXW3SOK9XQZ5eDBJmW5nLe1kZ1c80A/ug8irTr0CIFBqtACz+lGi48w/YiJsQzVXI6QkN/DB2x6RXyvZi/5o\n",
"hashes": [
"521ba4021dc02189a7241a7001f200a0f097bbe4b8470abe6b7593b2bc019c0f",
"5da98000a1696b017da5b4d1c8c5d4770fc845f217abac9fcdb3e70b43751b2a",
"75ef807623e19a202cbb1923acdf93d1b67700ed286eba60cc13dcf9036b9c17",
"6b2c7d2e31290e4f518af7049563cea0f28fb43c6024a4f6417f188260975f34",
"7aedf419ba92a940aa07761a45645f969c309ca2d834e0face8d6d96b97050ac",
"9f2c42f31e437d224a2ba34de9638b7bfa07c86b1613f11d956d020417e1ca2b",
"03d4a79fd617750dac24ab517ab7a84078ade5bf694c614bb70b6514afb6846d",
"cb32f657cd08a11cee3f1e7ed1f6abbe15c2cadd87eebacd3dbabcdc1ea9ec46",
"112b796e2b66e816c44d0e113ae3ab52b4e26c9d3ec109d4b8cf1221143c3cd3",
"f7baee12132c00394a45a47869fbe387cb79c359c3e9b4c98b9dddcf80d15788",
"f33a51704c3fc1d61307e197ae043a3f94b3da6570cf21ec8ccb1c3c94902ce9",
"ed5378b1b390c2f84db9128319ab6f3aef81d032080d58959dd8ed11de677397",
"8ba5912cc740f651f30dbff134cdd6a632f61dff6bc3f3f7a8c96f90f6e8aac3",
"23f0d73a73a0dbfb500398d65261681edeb7e5b223b562f447757fbb0ef53177",
"622b73b5f72bc2379fd1bc9703f000e9f065191264a4f2e3b00740cb0d0e11c2",
"5841b9f6db50f42c171062ee42fabe0d473e0d727f0a179ebf86cce48027aa86",
"45a4afb3c58becde8924497556af9848722bad661973e6f8e689720c19835918",
"7182c34af963a960545b08137b280c119742dd3551eeeb198233a10f295a39c1",
"6feabdcab15534086d552778e47363b388f8954af283a37f6884a682bda4f471",
"1cbb744c909597ce55b95b9419eb0ad034de5a58c3bec6ca3cb22c07618db7e7"
],
"logIndex": 1962905,
"rootHash": "c21cf450f6dd42a59039dbe46ec941270b82425919d43c0e9fc2dfaa49c15c71",
"treeSize": 1964992
},
"signedEntryTimestamp": "MEYCIQCineCMF4Wdfe7BuehmBsq+JM+t/wJVbfLyHk3BfJj5HAIhAOsy2GHlGqAJ4yMW8ceUrD+QXjeTlvtJRXClUbTtqeIj"
}
}
Loading