docs: state which images CertificateAudit can assess - #175
Open
stevebeattie wants to merge 1 commit into
Open
Chainguard Guardener / Enforce - Commit Signing
succeeded
Sep 3, 2026 in 1s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561131038800135579102315585729231196659174530261 (0x6249fc6b7395b3302d9502f953ae4fa2a9bedcd5)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Sep 3 02:43:21 2026 UTC
Not After : Sep 3 02:53:21 2026 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
e9:6c:26:42:5b:8e:64:2b:3a:71:c8:5c:12:76:1e:
d3:e0:2e:81:c5:76:f6:33:40:99:f0:b5:35:2b:4c:
44:7f
Y:
be:e6:9a:c2:06:dd:84:6b:6e:44:4d:52:f4:99:13:
c5:f5:50:b5:49:3b:25:59:7d:c5:18:f1:01:ec:53:
e4:7d
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
53:85:15:CD:76:E7:3D:B6:CE:FA:D9:79:F1:CA:39:51:09:86:B0:C2
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:steve.beattie@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Unknown extension 1.3.6.1.4.1.57264.1.24
Signed Certificate Timestamp:
BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoGUmRKMAAAQDAEcwRQIhAPlxpGNmdf8lu7mvkGue+8yGTwaJ92wxa95FsPNDJxT2AiAQyq8KMgRmDk7vREZ0DcXq8GiPqkUnhLe74/k16kEWUA==
Signature Algorithm: ECDSA-SHA384
30:65:02:31:00:c1:7c:8a:94:ca:4a:10:5b:6e:84:45:dc:43:
7b:35:72:39:f5:e5:8f:8a:bf:4b:bc:ed:19:51:dd:18:a5:f7:
1e:33:95:09:2c:e2:d5:8a:b3:c4:7c:2c:37:2d:22:fd:1e:02:
30:08:74:91:7e:75:63:f1:a1:56:ab:90:68:a4:a5:cd:14:f5:
05:6b:ce:67:68:db:3c:9d:34:86:89:14:be:98:0f:7d:71:69:
63:6c:e7:92:a2:e9:09:f6:e1:ba:0d:bc:b9
Rekor Entry
Details
{
"body": "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",
"integratedTime": 1788403402,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 2693975604,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2572081188\nSQQZNLT/WIFiV681lcBNwGE/Bva2BbLhVDxhq3Z+mZw=\n\n— rekor.sigstore.dev wNI9ajBEAiBWElnF6aICznGL0j3tu1H2cTdJ25U7yDrME7Iih+2Z5gIgSj9BMvTFNcGfrnwm7KA+NIAjFQMSoQAKHtMuF0GcrWk=\n",
"hashes": [
"a1c7be9b17a5f308da81bed45cfe8e831dbfecd56eaa2f6b599093909bb16b3d",
"960d0f0fc86bab597a53c0df29e2a99efbd9c885dd8c3371e1c6154cb54a437c",
"9375fd0d83329d4ad2c0529f86384f2fea7c26d8a2580c618e3f43bec27c7102",
"6f3aea11583763668b77d0d4b81c0e2017d6e849566c8b3821418ffb0bb350ff",
"9d802830bd4fc7257c878bd55a7d4bbe00d6366eca430760538100af66cf78f8",
"68d518ef82e7cbe7181289fc05d07fa9b255dd9facc14990a24b07065e65f29f",
"5fb7101ec3ad7a300d774e25eee65ae197e5257eb23897dfb3801f429d6e6e0a",
"d6eb68b1369d9248dc4a7f422f8bcb580807e95f8ceeae25816462a2fe994f33",
"f7212bb699aeb7c060e4cb85a67fdb38e2c41185fe712165a91305f1944da8f8",
"51f927f6e2dcddbb48484eb7e08a0ffe84963d900c12bf49a356d320657c2b0e",
"96da90126ea3566c833573e17b7e4d06d4497ddd9b7458a3c774872ea7c7b6f2",
"7951d04a1e9527e4168004e4ed19542a3ca5f6ba7f75a85d4d2a0a0f3a2ebe3f",
"1144a70d0f02381723aa4c99b8032847e0499ab75b5f06b6982aa520ee6f58f7",
"db557668132fd4898fcfe0efe140ed0d60f24947381cd3795662dc336184a4e4",
"20a3e2344ad7d464195796c830a2b4ba37e5fc8193eac5521d8b18bb492cb7fc",
"c1f2705b1b1c9c0d8c50887d8f644cfe346dcf1c51e7a44941384e501494b497",
"4f7bc01c3316f06c5691b1e1fddfc75de953138cfb44c5c48ba671665c7eff84",
"2322ea3b79dd3f21e04b9b82dc9f168843f73ed35c02f163ddd8cd21a5e98eb1",
"723bd409867f8c0f7866e2b7f69a253b658646d8fc3444304417251e7829f054",
"8d062f17922530fa2b50f1a65489fd02bc532c8cd4b74130f21057550889a2b2",
"5e36101f9d3903c2682db5e667efc408fe6c693b9e46bbecd3f013a2698c3e30",
"79748bacba8a4b14538b148ffe4e188a6ae207696e7daa3ab6ba93aecc719728",
"4a775b30a56d7137a7024c22d8905f1b30fe9a17b1a75a896d1218f80d494485",
"c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
],
"logIndex": 2572071342,
"rootHash": "49041934b4ff58816257af3595c04dc0613f06f6b605b2e1543c61ab767e999c",
"treeSize": 2572081188
},
"signedEntryTimestamp": "MEYCIQD9r0Xr5TS1/gUOg3GaBl0rorAr0qZqRP7O3LrBnv9uiAIhAJLTGn4ZCwPuLO/6mp4qG6YXb8mAl0M9OvBKsKu2pjFv"
}
}
Loading