Skip to content

centralize all key fetching logic

b97363e
Select commit
Loading
Failed to load commit list.
Open

Centralize all key fetching logic #2015

centralize all key fetching logic
b97363e
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded Mar 19, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443541043919185228074661518581653921541485501912 (0x4db1117ab6494b4c5bb677df5421963f89ec1dd8)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Mar 19 12:38:26 2026 UTC
            Not After : Mar 19 12:48:26 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    2c:cd:72:71:cc:62:ce:59:de:56:87:de:5d:19:32:
                    4f:bd:f5:30:b1:ed:9d:0f:12:45:15:b1:d1:f6:95:
                    9b:b9
                Y:
                    37:b9:60:af:35:dc:66:ad:9e:db:84:b3:5d:00:37:
                    db:67:43:27:84:bc:bf:67:37:89:4a:2d:5c:86:bf:
                    a7:56
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                A3:41:39:B5:32:AC:F1:A2:27:B0:D2:4E:54:C0:CD:F0:03:1D:46:45
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:t.ramlot@hotmail.com
            oidcIssuer:
                https://github.com/login/oauth
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHsAeQB3AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABnQYatQUAAAQDAEgwRgIhAKHduZn+RNbaDg5LBH2xgiYHcEznBsOzs3MtBdD8cSaSAiEA5eQw/btUXsA8+usPUN4LUg59o5kDnhFGg7y+o80ZDbo=

    Signature Algorithm: ECDSA-SHA384
         30:65:02:31:00:e5:80:f7:0c:7f:e3:1f:61:0b:bc:c1:65:44:
         35:a9:d7:23:1b:02:49:24:d9:b1:d5:81:11:cd:41:a5:88:57:
         65:42:4c:53:7f:f9:01:6d:7b:45:be:f2:5b:e2:0a:e0:46:02:
         30:7d:b4:ed:df:dd:d8:e1:d2:e1:11:17:3e:25:63:01:91:ff:
         46:e9:b7:f4:51:c7:69:9f:e3:eb:21:70:2a:11:54:01:40:79:
         45:72:b5:5a:a1:a2:9c:61:14:10:76:ac:84

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1773923908,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 1133885773,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1011983460\n4hcExBMfkPJgmC5P8tt0z5w6z0of8urpOXwEF9Nk3Dg=\n\n— rekor.sigstore.dev wNI9ajBGAiEAmn1bEBI6PTBiXf/uVDty84SKH2a9HxL8gacJqsiXoJkCIQD728U4cejJp2A1fzBurD0Js1pEQd6TT4M19Jzhid3g1Q==\n",
      "hashes": [
        "da347ae6a073a7903e9b863f0887548f3b9e63a188c0e7fda4ac00e398c3ba73",
        "8b64d146cc3b9708ecb45ee0245ea53cf3248932ca4c94879be18ef37d92538c",
        "67963ccb213d2bed5d4d77297c0e04c6ee988a9452d20095369d29c66d5db1a2",
        "84a403d52bcdc5b5d6cb86e54bd31f73525c25d8fa415e787f49285a25f1f0ef",
        "55b15bc2f249d469a2eae2b8213dd686655a6e6207191196f6dea89f77565efe",
        "95401785386e35195797228264bc7e0035d6fbfbe800c89faa73b728b420b6db",
        "060098a3d390ff7235e7d6a9baa73ad38bd2e54635588d500bf7f3a20ce3e3fd",
        "10127bf4b3372899bd62647fbb5710e069abe91ff36cad02cc54deaaf8e33d15",
        "b02f7d2fc74cfc537cbe3d98b34e4bde9ef058492cdea1b43d5dcb480fa646f5",
        "7fe244b719e8b607ae611d7d4c4923b81c8d4cfee1469dafed43d1ebad6a467c",
        "f65b209820d4e5ed3f1de7f320307c9d6aa2a919a91a9983d6cdea01cd40a635",
        "9a9652369f25ed02b44d5a29090f7b3e7fdfff6c468766ff7a52297e58f8ebf3",
        "947ada8a8b1c892a668dec99ca37e6e2fcddefb58ea4bb3be271efb3bbc4929e",
        "36abae3f1d60f7578c1a63de91361b67f0011e35870b18eb69d8e368db8e522e",
        "0567f42470af23c1bf6c6b31664551765d441500971f7dd13ca6c4bd6a5e491c",
        "938a5eb2dc49d97801bf5b9b08567e31b1de17008d2909a87e63ae88fd0bcbb0",
        "4ae48a21ee29ca0a06f86c6df7bd975bab47d30832e84cf70a5a720d6f6f34e5",
        "24fa8cf7a59298d765de223f38fdf6ccd8833d5965878e2b176b9a5a283ab463",
        "0832c565dcfba7f851f31c04781affd98a8259db38129b1d013780aa47c45f29",
        "791940cb71bb420336316a3626bcfaffaa25b53eff1701a21df92989aa004652",
        "7cb02f138e8da82555f3a129076a4a9302651638c593b9ed5f7942f8f899b88a",
        "4f80ea583e36840b4dfaf5fc8ca096aa80b899e13825e908f4bc5818270fcb53"
      ],
      "logIndex": 1011981511,
      "rootHash": "e21704c4131f90f260982e4ff2db74cf9c3acf4a1ff2eae9397c0417d364dc38",
      "treeSize": 1011983460
    },
    "signedEntryTimestamp": "MEQCIARyhppicfqZDLK1XIXWAp9fyqskjt8CTIc87M7/3iR7AiAaSlovCjSw+ay7KiCj2EgIyUJrtUUrCflNk6srO0cMLA=="
  }
}