Skip to content

dogfooding chainguard libraries

7780fdc
Select commit
Loading
Failed to load commit list.
Merged

dogfooding chainguard libraries #3306

dogfooding chainguard libraries
7780fdc
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded May 13, 2026 in 0s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437640292177659924040296161334689955533457887397 (0x4ca8782bde1d6c38e464e896e9c5b34fc1aa90a5)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: May 8 17:20:59 2026 UTC
            Not After : May 8 17:30:59 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    92:c5:1d:54:81:a8:78:bd:6e:16:31:4e:24:1f:b0:
                    17:65:a8:48:6b:fe:5d:ff:f9:86:72:63:16:f8:04:
                    64:4b
                Y:
                    3a:26:8a:d3:bc:cd:0f:0d:98:46:47:3c:af:cb:02:
                    31:3e:91:0d:a6:15:a4:d0:17:25:ef:f9:5a:35:0b:
                    e8:41
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                82:41:A4:D0:0C:91:4D:57:9A:94:16:22:0E:0C:B1:F8:AE:82:63:FF
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:matthew.helmke@chainguard.dev
            oidcIssuer:
                https://github.com/login/oauth
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHoAeAB2AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABngibWKEAAAQDAEcwRQIhAL8XkIN3wOa4KelCrn40Dr+GmF7Wcq7SUPLEr6905SLeAiAbdT6cidwclSXDax8BtwMHWoNDDpPYl2AwzH20d2938w==

    Signature Algorithm: ECDSA-SHA384
         30:65:02:30:01:1b:be:dc:56:22:7c:50:39:7a:76:87:e3:07:
         9a:c6:6c:48:26:30:35:13:66:9d:f2:81:83:4d:69:d6:a9:02:
         43:47:63:eb:39:20:19:7e:e2:4e:ff:4e:a5:6c:b6:7e:02:31:
         00:c5:7d:ed:dd:07:b4:bf:bc:88:c7:7e:e4:55:2a:47:1a:62:
         ed:83:4c:6f:8c:eb:40:b0:91:7c:19:0b:39:63:b5:2b:29:f6:
         ce:f6:de:be:6d:4d:90:46:24:19:8b:2f:91

Rekor Entry

Details
{
  "body": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiJmODg5NTljN2VjZGJiYWM4ODFmZTBiMTdmOGQ2Nzg4ZjhkMTI0M2JmNzBmMzc0MTc4NmRkNWY5ZWNmODg4NmM0In19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FVUNJREEzdUJsdHd5amlkOUUxM013aWZzMjZlU0EzMUthdlZoZ0lyWmRTNXVYd0FpRUEzd001ZlkvK3Njbm0yMHBCTkUwMkQ2MjBoWUVweFV2aEJJUXFmZ01zVExVPSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVTXpSRU5EUVcxTFowRjNTVUpCWjBsVlZFdG9ORXM1TkdSaVJHcHJXazlwVnpaalYzcFVPRWR4YTB0VmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDVVUVRSTlZHTjVUVVJWTlZkb1kwNU5hbGwzVGxSQk5FMVVZM3BOUkZVMVYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZyYzFWa1ZrbEhiMlZNTVhWR2FrWlBTa0lyZDBZeVYyOVRSM1lyV0dZdk5XaHVTbW9LUm5ablJWcEZjelpLYjNKVWRrMHdVRVJhYUVkU2VubDJlWGRKZUZCd1JVNXdhRmRyTUVKamJEY3ZiR0ZPVVhadlVXRlBRMEZaUlhkblowWTVUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZuYTBkckNqQkJlVkpVVm1WaGJFSlphVVJuZVhnclN6WkRXUzg0ZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDB0M1dVUldVakJTUVZGSUwwSkRSWGRJTkVWa1lsZEdNR1JIYUd4a2VUVnZXbGQ0ZEdFeVZrRlpNbWhvWVZjMWJtUlhSbmxhUXpWcldsaFpkd3BNUVZsTFMzZFpRa0pCUjBSMmVrRkNRVkZSWldGSVVqQmpTRTAyVEhrNWJtRllVbTlrVjBsMVdUSTVkRXd5ZUhaYU1teDFUREk1YUdSWVVtOU5RelJIQ2tOcGMwZEJVVkZDWnpjNGQwRlJaMFZKUVhkbFlVaFNNR05JVFRaTWVUbHVZVmhTYjJSWFNYVlpNamwwVERKNGRsb3liSFZNTWpsb1pGaFNiMDFKUjBzS1FtZHZja0puUlVWQlpGbzFRV2RSUTBKSWQwVmxaMEkwUVVoWlFUTlVNSGRoYzJKSVJWUktha2RTTkdOdFYyTXpRWEZLUzFoeWFtVlFTek12YURSd2VRcG5Remh3TjI4MFFVRkJSMlZEU25SWmIxRkJRVUpCVFVGU2VrSkdRV2xGUVhaNFpWRm5NMlpCTlhKbmNEWlZTM1ZtYWxGUGRqUmhXVmgwV25seWRFcFJDamh6VTNaeU0xUnNTWFEwUTBsQ2RERlFjSGxLTTBKNVZrcGpUbkpJZDBjelFYZGtZV2N3VFU5ck9XbFlXVVJFVFdaaVVqTmlNMlo2VFVGdlIwTkRjVWNLVTAwME9VSkJUVVJCTW1kQlRVZFZRMDFCUldKMmRIaFhTVzU0VVU5WWNESm9LMDFJYlhOYWMxTkRXWGRPVWs1dGJtWkxRbWN3TVhBeGNXdERVVEJrYWdvMmVtdG5SMWczYVZSMk9VOXdWM2t5Wm1kSmVFRk5WamszWkRCSWRFd3JPR2xOWkNzMVJsVnhVbmh3YVRkWlRrMWlOSHB5VVV4RFVtWkNhMHhQVjA4eENrdDViako2ZG1KbGRtMHhUbXRGV1d0SFdYTjJhMUU5UFFvdExTMHRMVVZPUkNCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2c9PSJ9fX19",
  "integratedTime": 1778260859,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 1475439646,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1402879056\n8kX1q9bpA2qdrgpeDVyj28OHfrJHKbaGAjnKbt2v8ZQ=\n\n— rekor.sigstore.dev wNI9ajBGAiEAwsXw8O13zQvwhWJ8JR5j/hSp2U0R6Qffoe4irTUu+ZMCIQD4Wmlr9CTmqzUsY0Asa+xUyQ1w4iNN/reAjU089JFQ7Q==\n",
      "hashes": [
        "588c8eca93f0bafd57f5897107493d9b0b7f414efd16860818df34e9382009b3",
        "d59df0bc2be492098d7bb39aa9c1cbc3fdb0bec1209e44181a353568988cf2e9",
        "6f4f8e9061d45debb78d00a406417a6016a367681df82f5f9a2d4c1f21386dd9",
        "706f4e78196d51effb3bbf031baffc665f27b408181c004a3d6ea9208efba714",
        "8f09c6f4bbf2e196a87323ec1f386cbd22a8ddd540541f58a282b6671ac4b591",
        "861758f2fe1021516a62d56852afec3a110b600fab3fa3739cf531a355272585",
        "f77223b95196aa7499f2ce77fa899efc48870d453ab33c35df1b0303974038a6",
        "329bc257bace3223b50b363506da8871a1882e12c081f636acde687fb1b463da",
        "6c667f81512565d376bd30a7e90b3e94f2d2aadbc0341c8d06f2e7b0007c9dd6",
        "393ee6653cddddd1184f5544ac0c9922653967e3ebdd755cbff1c2e4e1f001d3",
        "a27e6b0c54c417d8379419f4f95a7aeff4b59122ead2cc6ee8fb290c8358e442",
        "2a628a727d2138ce16183df80709f6ebebfb68a36cb3c25b36afd8799155cfe8",
        "ac17f55ff860c9d00a35bdbc04f55e3c05d62fa20f6962ce19d07d2977b8ad51",
        "46e285461f52f222186fb20467762102fd765de8c68702658f7883f3c79c2f5d",
        "fbf1231c7425bc9e6922b99777eaac1e9aeb06a4c191ed9bfa7adcdf652f4ff0",
        "1567b5a506e8f2a615c3bc4d324c484ace97c1504de8644890ae6754da213006",
        "ea5d8d52ad8fac1be0a7d80c440f61adecf4630f627ac8fb3c4b62eb681bed05",
        "66096b62087c92255cadb137e46041d6bfbb7627ad4ec075d1e927e8c71df5c4",
        "5af4581477d201eeeb7d90e22e3373cfa1afe573fb9a9d84d7cc06b616138c75",
        "dc04c1e32f8f794775d26e8559868d3ca1f93659f323346bec4fc0cff81ee463",
        "5d99debabd5dfe0d889d12501f6a24e24ab71b6ec8e8a90c62b74d3f0d355747",
        "2db3c658f5cd6fe42042fcfe2e28d88543f5e7c03323289aae5d613aff4b0a9d",
        "638d93dbd1e0a8de199c787108b39f88492c8f0c2a16fb60f4e0e325c5b65194",
        "45803d91720b5f0027adfc071a2ce5469200f8794dbdc58c2660abd28e489f79",
        "4afcf1419777b322321dfeed541f76678639be7fbdcd2c7c133f405b271644d8",
        "a03acc82429a20a3dd893a5221915526694fc6f9841888f8b47a687edb211827",
        "793f85e3bd60d8725f778dd4e23e0bd4f20192de2b2db1d077fa4e47fae594ed",
        "0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
      ],
      "logIndex": 1353535384,
      "rootHash": "f245f5abd6e9036a9dae0a5e0d5ca3dbc3877eb24729b6860239ca6eddaff194",
      "treeSize": 1402879056
    },
    "signedEntryTimestamp": "MEQCIG9JMDS8Y3/JEFTXOUIT1DrcIwzBQiUCQSDRZU/ySYz3AiBkXRWfZrmgb+otvfGyGmvJgHizwtkQFuSegg1lhhR97w=="
  }
}