Update YARAForge rules, refresh testdata #482
Merged
Chainguard Enforce / Enforce - Commit Signing
succeeded
Oct 3, 2024 in 1s
Successfully verified commit signature.
CLAIM | DESCRIPTION | |
---|---|---|
✅ | Found Git signature | |
✅ | Validated Git signature | |
✅ | Validated Rekor entry | |
✅ | Allowed by policy |
Details
Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61977706224818268186742467248584779824432763491 (0xadb2d2cdc4944d401703e835d4aa75667e15263)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Oct 3 12:39:22 2024 UTC
Not After : Oct 3 12:49:22 2024 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
39:92:6c:46:7c:9e:9b:81:ae:ff:78:9d:9b:f1:95:
91:03:69:49:a4:c4:fa:0d:3f:09:03:0e:90:28:5a:
1a:f4
Y:
9a:58:49:85:fe:5a:c8:e4:c6:45:a7:f3:35:45:7a:
c3:d6:cd:d2:d3:97:e9:22:1e:98:0e:c8:9b:22:71:
55:4d
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
DE:86:31:9A:D8:C0:A2:62:29:CC:EE:65:29:C7:31:BC:F3:F8:52:57
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:t@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABklJkXdQAAAQDAEcwRQIhAJ/ZkP6z4OBtOvvJnwF6NB8jByQcvPyxDCT3pmXC5k4vAiBJOb+CycJqoSx5UbfMfy6yMRPQVkoh9TiNdSkgMiyR2g==
Signature Algorithm: ECDSA-SHA384
30:64:02:30:7f:df:98:31:d4:a3:c3:21:ac:bc:31:6c:40:d4:
46:bb:5c:8e:fc:be:5d:33:16:71:4d:a6:ff:8b:71:fd:19:59:
d1:9c:ea:a2:7e:b3:8f:2e:7b:7b:1e:6d:41:d4:bc:3d:02:30:
6f:44:4c:a7:13:92:d3:0c:a5:0a:a9:2f:fa:ea:25:15:7e:44:
35:e7:93:60:e3:92:74:80:3f:24:a5:7e:0e:ac:c7:f6:62:83:
e3:25:ee:cc:a4:8c:8c:8a:05:cc:ee:3d
Rekor Entry
{
"body": "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",
"integratedTime": 1727959162,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 136482142,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n14579831\nlYL+N4WNsrETa4vva0D+0xtbS7EGuUymXydGGxhVKQg=\n\n— rekor.sigstore.dev wNI9ajBGAiEA9zxo1OlLwz44pyb3aNG0hiJsUA9v94fk7so1nMKZlpwCIQCWMM/zIcYYRmNUXh9fED4YjWYEb4lvkNna2PEw7uuQyA==\n",
"hashes": [
"bfa33fad3cce0e4bc7a25d9182dd328b3b1781e25b0ffe9cf9128255be0a737b",
"cd9cb719499bade76077054a4ef10d71cf0f30b6dc667d7dcea1e2872e5e9cf2",
"bba39834b878cb9b917ecceeb63ed6c5238278884aa0ab46ad2f4a319fd5769b",
"83574687aa67c77f13732d6b75acdc3a4a7bbd6c65c15d37e187e11b40a9eaea",
"89954c7c52e9695ec4de847db4e4b17b3ef948b0fca32f847ccc95db70df1780",
"eca160705b31f6a2aba990b929dd1a9db31d385658bb58d9546823de4846d1a0",
"e00a28034e71246027f72ef60b0fb2450eacc051e9c3c5fce99bfb119efd4e97",
"996ad39a37f0000ac7439e341f0a897187e8b7f3cd52e221f654d70c2fac9e85",
"6f7c3bb38320f6691d268f1dc3015f92b86a4a185a34f3117801d0eea9a74a89",
"e92b5a43cadf75cbec7bcdc89cfc5776d42525156869b60c00e9287f1d6f7d0e",
"eceb03e83123c183734ae79a4888de4f450ad093f8200b71be66c5e6fc34713d",
"40643ae44fc2e9d799386948449d18a56ddc52ecdf2386cf1621d979a5bcf8eb",
"966054578838591a6a004f068f0f453fe0bfc4064e3e60d775fa0b9ba3723ecd",
"62ce01e1b41548cfd93242c72b506cc48f49250751e3295db12fbdd0310462be",
"f115b68d9bc6004d1bcab41800043160965509357dc3f065de9ef7d99b311dcc",
"3e096d560760e6690be6d67acfdaac11573f83dacb9447cac79d2e4a4dc167a4",
"87d6fe09251965ba5dec6d74256dc65abd5d9b74632c550072d0c52df5e653b0",
"f79076187661618a6d54c8400dfcea2b0b8c6095c9eae50ae4e2148f808e59a3",
"ec4910e5cdfe2cfa26691de3b486ac5f2ed70a3fdbcd6256e91e478bdd1c8137",
"50e20a44dacee1263cbd058f33d5eccd8077ed27ae3bc5b333c4ff2991be9f00",
"9bc8e601d7371c40caaafbc82a61a1aa88a502fa81c5986c92d5e65e1e7c5a20"
],
"logIndex": 14577880,
"rootHash": "9582fe37858db2b1136b8bef6b40fed31b5b4bb106b94ca65f27461b18552908",
"treeSize": 14579831
},
"signedEntryTimestamp": "MEUCIQDn6Xh9xDCIJpfhObq7TCsTv0fhoCYnFFQZPOhA/t+WngIgHhp9aRLIx45xtxVzVmN7KBxqwfUa7mAy+KOcVxLRGEw="
}
}
Loading