validate pipeline fields together #748
Open
Chainguard Enforce / Enforce - Commit Signing
succeeded
Oct 11, 2023 in 1s
Successfully verified commit signature.
CLAIM | DESCRIPTION | |
---|---|---|
✅ | Found Git signature | |
✅ | Validated Git signature | |
✅ | Validated Rekor entry | |
✅ | Allowed by policy |
Details
Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313326145537764807696598161462750838017277407134 (0x36e207c11c856f2fc1490e1140352be086c5af9e)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Oct 11 14:39:47 2023 UTC
Not After : Oct 11 14:49:47 2023 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
a3:c8:d9:74:48:ed:f6:81:f8:aa:78:ef:cf:44:db:
af:de:0d:71:52:99:97:25:1e:d2:b1:2d:2b:c2:93:
9a:67
Y:
87:61:25:f4:21:9d:e4:5b:3c:44:e8:03:87:79:c5:
4b:c9:b3:94:d4:56:84:85:1a:e8:c7:b4:d6:a4:43:
c6:b5
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
99:3A:5B:A9:02:8C:11:66:4F:62:E3:EA:E8:56:DC:96:08:9D:30:F1
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:jason@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABix8t9ZsAAAQDAEcwRQIgRpkVSg0aIm6ktq/1trpEPkUjDk+Ccm5Jdshdn+dKphwCIQCGRmFm6c7ht/G1GCt8y8N7kYrl0GesPOd88idwuPUZqA==
Signature Algorithm: ECDSA-SHA384
30:66:02:31:00:90:74:92:1d:15:6b:a0:04:71:61:d1:74:44:
ae:f3:3c:69:65:cd:46:1d:71:fa:b2:bd:9a:3a:01:6f:b5:87:
ed:e3:7c:6a:bb:c1:17:8f:40:a0:39:d3:43:32:7f:f3:c3:02:
31:00:cc:9c:f6:4d:a6:3b:92:3c:c1:86:ad:6b:5f:af:51:54:
1c:4e:e5:04:86:b8:ab:db:12:69:4c:0c:4a:66:b8:e1:b4:61:
33:8e:93:24:4c:d4:5f:58:28:ef:95:58:13:00
Rekor Entry
{
"body": "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",
"integratedTime": 1697035187,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 41959884,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 2605736670972794746\n37796661\nsrG16uXakQwG+mY+YVdppygRld5phc35ZL2zRfae2As=\nTimestamp: 1697035297414057705\n\n— rekor.sigstore.dev wNI9ajBEAiBhyWgzX5X1cpdyho0J0iIyeyzVmPSRJ6CxOrwM6j6X+QIgWcd9WDI9n9Ld2VfzUAqgp1TyJGbN9ghgErmnj1tcVU8=\n",
"hashes": [
"94d7e71b1283bd94d6342f26b7deebef4e09b29f08d9b6261cff8d20faea98b5",
"fd14ee5f36b1313c5497da93438aefbe36d3ecbd0663c5941ff0395ec2f0660b",
"616e3d7ba29d4b0a56e4edb34413865766114b51791302656acfb100ef6bb493",
"35b3fcd8f3d887f418c0b7388d9b33df6a14408a5bfdc2fd1001a075de469d31",
"80b8db459d14aaf7ca38193b81c54cc4cbdf1aafd00897970281ff5423f4bfcd",
"c8a6864ac26199e5e408474feda9d5d3e4a98e75be0ccc0d5af07b453144cf0a",
"9af28a17685c306018bf8077a024afff422463b9ee44e9387dd5d91a4f334eaa",
"436336402bf790a6c6fb2ec13954293c26f19e6a06dc0fa720e0fa3e56df3230",
"9ea48a34c8330c0c0de9dcee70fcbf5e5cb5de65461496ab0cbcf4eca1d6f5ff",
"f3124955d2cde36a133fffb247c450076771a1dbebe036570c174fc13262f1c1",
"3ffd7acad8187b047bc82f8485b3e65e624826beb28f87115022315de2d211da",
"1531e532ff10432280b269e4540c16652ccfde6029cd05e4899acdf9b406834f",
"e4bae7cf999d97d7ce8ac742e389749630498bd6f00d26ff02b5ecbc2a600a24",
"740e08173e54693c2447cdf1d5052464bab451926ef6445926e483b14ee45641",
"12a5c36838e5ac885e63fd8243f774fa9a781017aa2e56aadbfd28722ca8e406",
"6969c49bd73f19bf28a5eaeabd331ddd60502defb2cd3d96e17b741c80adec6c"
],
"logIndex": 37796453,
"rootHash": "b2b1b5eae5da910c06fa663e615769a7281195de6985cdf964bdb345f69ed80b",
"treeSize": 37796661
},
"signedEntryTimestamp": "MEUCIHVlowveb5bKy+Q8U/qIDMcX79yle9jV0fUEtCz1cbZ4AiEAqm9O9UTiAEhs5aZVEkd0lAEu9t2ISsZBINjcFoHyDEY="
}
}
Loading