Disallow '/' in key name #1494
Merged
Disallow '/' in key name #1494
Chainguard Enforce / Enforce - Commit Signing
succeeded
Jan 24, 2025 in 1s
Successfully verified commit signature.
CLAIM | DESCRIPTION | |
---|---|---|
✅ | Found Git signature | |
✅ | Validated Git signature | |
✅ | Validated Rekor entry | |
✅ | Allowed by policy |
Details
Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475047153426751256592759295856322833340856706401 (0x5335d9e11181c64852bd43ba7d5e5408a32aa561)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Jan 24 00:48:34 2025 UTC
Not After : Jan 24 00:58:34 2025 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
67:03:82:d8:fd:ba:90:4f:5c:cb:4d:66:0a:2b:9e:
ae:ae:19:17:1b:a9:e9:74:e9:9c:47:94:8a:ed:65:
5e:f1
Y:
4e:8e:df:ef:cf:ff:87:be:a2:47:4a:08:32:6f:3c:
92:97:a3:7b:45:aa:eb:93:f9:90:d7:53:ee:26:d4:
d4:ea
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
0C:7C:41:49:39:37:BF:60:D0:6E:B8:9A:CA:91:4B:13:71:E2:5B:9B
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:[email protected]
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABlJXIOFsAAAQDAEcwRQIhAOX5w23Mr0/LjZdm2i6/tQiVG/9kcvxi+b6cMTgJkCGZAiAJ6lPvZQnJK04shhVUQIWLgP41UCDblq1z1CdpBWDGyg==
Signature Algorithm: ECDSA-SHA384
30:65:02:31:00:9f:50:84:45:3e:4c:6d:e8:50:bb:1d:3e:eb:
28:c6:71:f6:d5:26:66:8c:d4:83:91:7a:d3:64:a1:bc:8c:ef:
11:fa:2b:6c:50:7a:62:04:08:36:72:71:56:c4:44:82:d0:02:
30:0f:75:91:ce:46:a4:7e:15:87:ea:42:2e:87:14:39:f5:c3:
23:56:4d:4c:0c:88:11:15:17:e5:61:48:83:f8:a1:80:c2:23:
41:19:87:c8:7f:bf:de:52:59:17:a1:df:91
Rekor Entry
{
"body": "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",
"integratedTime": 1737679714,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 165065771,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n43161869\niMXw/k0zd2h1upZc0MB0M3R/0As7A+WygOUTKmSYFB4=\n\n— rekor.sigstore.dev wNI9ajBFAiB1ZCb/mvSty36SZGjWAip62dhBS7N4oEHaRCFfkERTbgIhAOs8SAbihd30fYoeKp7HrfOtRm5SOpue/erxc2t1XRye\n",
"hashes": [
"5a79cf2ede235697e0d8f490d78901cd839712c1f79f0d0cfa450486f274119f",
"e4c80a5fc561d31543a97b0df9f459c142252889caa2b29cf5da4b52a1fe13a6",
"8234eb066e0b6613eca1a610ef4354e3a1ae8b39814e70b7ad18c115a3443831",
"3bf1a0ecd1ce5c323a9aeb2b465dbe0cff98e379dafe58ff00e7f4a6c5d90d1b",
"fecb1ae635f3162fd94e45d320c64391dc0aaccc767850c71f8a7ab7a0d275a4",
"36b3a3c7db7fad3e7897c6ad92a90400315364fdd9e4e73e2d3f84aa5dcfe11b",
"f053341f4548468983349ccbce65d84a98aa1cd0d44ac0da9e518224ebbd2308",
"8a5ecde40bcde3ccb479477f912184d528440fbcbf5ac1c5dc12355547882dab",
"af16afdcd75db53c5fd67da4895168997e6c9a6949f1a9f0fcbb8a71e93e5ef4",
"303cbc67378c751794131252e3026f4a17d3ea53b412c9bdf6cd744931b49b83",
"beeb02757f58dc925d6ec9b65962b1bc1ab4b605741be941575c03d5afb1d88e",
"383a5a7c24e87a304785ae066bebbf2b244a19f1dc376d4b7da33080aef95c37",
"869edaec23221d2f46e5558a241cb1410bbc7259e432c3dab4aee555de2269f0",
"312b0bdc47465ab63d87448e071a9ce8c752061f075158c155dccc57b3239cee",
"855a8aa205eb0b2a551a5e7e6bfb140836a1fe5dedff9da0e7bb4a48c71705f6",
"27b3ec625fc97414ccb83fa1c3433be97e3c5a70e4347ec1c99e6ea5a633f5d2",
"8d4f7eb608d320a51819e53b4fb463ab22fe17e80557db427705f6199d54b50b",
"bde9b268c8f435ad4b3236c1ffd0e692af13fa301bde8fb20844a001ac940015"
],
"logIndex": 43161509,
"rootHash": "88c5f0fe4d33776875ba965cd0c07433747fd00b3b03e5b280e5132a6498141e",
"treeSize": 43161869
},
"signedEntryTimestamp": "MEQCIFLQnTOWi2VZWuHBwx79dh9+q3AErb0QxCQMdzzafU/uAiBb+CU1OEWeJKBfW9IF2GBIb7pFFed7Ewd85xu68Hgo3g=="
}
}
Loading