Skip to content

Merge pull request #12387 from ggbecker/update-ospp-control-file-2 #2778

Merge pull request #12387 from ggbecker/update-ospp-control-file-2

Merge pull request #12387 from ggbecker/update-ospp-control-file-2 #2778

Triggered via push September 18, 2024 16:09
Status Success
Total duration 24m 10s
Artifacts 1

k8s-content.yaml

on: push
container-main  /  container
17m 40s
container-main / container
container-main  /  sign
7s
container-main / sign
Fit to window
Zoom out
Zoom in

Annotations

1 warning and 3 notices
The 'as' keyword should match the case of the 'from' keyword: Dockerfiles/ocp4_content#L1
FromAsCasing: 'as' and 'FROM' keywords' casing do not match More info: https://docs.docker.com/go/dockerfile/rule/from-as-casing/
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:8bb2b95f217b88585f677ba8bf2d5865c4216bb2a8bd86198a28359bc39531a8 | jq '.[0]'
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:8bb2b95f217b88585f677ba8bf2d5865c4216bb2a8bd86198a28359bc39531a8 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:8bb2b95f217b88585f677ba8bf2d5865c4216bb2a8bd86198a28359bc39531a8 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text

Artifacts

Produced during runtime
Name Size
ComplianceAsCode~content~YI6BDZ.dockerbuild Expired
132 KB