Skip to content

Merge pull request #537 from Vincent056/instruction_fix #220

Merge pull request #537 from Vincent056/instruction_fix

Merge pull request #537 from Vincent056/instruction_fix #220

Triggered via push June 25, 2024 14:22
Status Success
Total duration 1h 36m 58s
Artifacts 4
bundle-container-push-latest  /  container
33s
bundle-container-push-latest / container
openscap-container-push-latest  /  container
1m 25s
openscap-container-push-latest / container
operator-container-push-latest  /  container
1h 35m
operator-container-push-latest / container
bundle-container-push-latest  /  sign
6s
bundle-container-push-latest / sign
openscap-container-push-latest  /  sign
5s
openscap-container-push-latest / sign
operator-container-push-latest  /  sign
10s
operator-container-push-latest / sign
catalog-container-push-pr  /  container
1m 2s
catalog-container-push-pr / container
catalog-container-push-pr  /  sign
5s
catalog-container-push-pr / sign
Fit to window
Zoom out
Zoom in

Annotations

12 notices
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:7126171fe04c2cfce55b14662b8c2c9a6e23c32e75bcdafa95d2e41d9f6da884 | jq '.[0]'
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:7126171fe04c2cfce55b14662b8c2c9a6e23c32e75bcdafa95d2e41d9f6da884 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:7126171fe04c2cfce55b14662b8c2c9a6e23c32e75bcdafa95d2e41d9f6da884 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:d8672e1c65a0cc471ba607dc2c72c0beac9c481f07924569d14571c72c150729 | jq '.[0]'
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:d8672e1c65a0cc471ba607dc2c72c0beac9c481f07924569d14571c72c150729 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:d8672e1c65a0cc471ba607dc2c72c0beac9c481f07924569d14571c72c150729 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:6458b8c2a45ccc21f7f6add3b5a95bd8d10fa70fb1baea6c904d85a6cf6983e2 | jq '.[0]'
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:6458b8c2a45ccc21f7f6add3b5a95bd8d10fa70fb1baea6c904d85a6cf6983e2 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:6458b8c2a45ccc21f7f6add3b5a95bd8d10fa70fb1baea6c904d85a6cf6983e2 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:a0463d843a3770b9ac845bb6ff36b79acce6a140d6979f0c66713562d34687e8 | jq '.[0]'
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:a0463d843a3770b9ac845bb6ff36b79acce6a140d6979f0c66713562d34687e8 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:a0463d843a3770b9ac845bb6ff36b79acce6a140d6979f0c66713562d34687e8 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text

Artifacts

Produced during runtime
Name Size
ComplianceAsCode~compliance-operator~EHGTJY.dockerbuild Expired
36.4 KB
ComplianceAsCode~compliance-operator~H2M9GW.dockerbuild Expired
9 KB
ComplianceAsCode~compliance-operator~ITW2U0.dockerbuild Expired
40.3 KB
ComplianceAsCode~compliance-operator~PV28O2.dockerbuild Expired
22.9 KB