Skip to content

pipelines/git,fetch: obscure half of found git commit and sha to avoid copy pasting - #2458

Open
vishal-chdhry wants to merge 1 commit into
chainguard-dev:mainfrom
vishal-chdhry:obscure-sha-commit
Open

pipelines/git,fetch: obscure half of found git commit and sha to avoid copy pasting#2458
vishal-chdhry wants to merge 1 commit into
chainguard-dev:mainfrom
vishal-chdhry:obscure-sha-commit

pipelines/git,fetch: obscure half of found git commit and sha to avoi…

4d29b04
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Apr 2, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546076847354491950656743473479878874211414487170 (0x5fa6eec6f33b605f00a2b770e4f047072658b082)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Apr 2 14:50:09 2026 UTC
            Not After : Apr 2 15:00:09 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    86:0d:11:34:75:c4:69:96:c3:68:15:56:c8:d4:94:
                    00:bc:e2:a7:5b:34:b7:fd:ba:7f:c6:54:f2:99:b9:
                    ee:d1
                Y:
                    a9:52:12:c1:63:41:5f:70:d4:71:25:fb:5e:2b:a1:
                    d9:43:3b:9e:00:1d:ed:32:07:d2:41:37:69:09:94:
                    ce:d9
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                81:5E:28:A7:E9:B5:B1:47:EA:2D:52:77:81:DD:95:E5:7C:4A:88:7F
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:vishal.choudhary@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHsAeQB3AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABnU6sUxgAAAQDAEgwRgIhAPWmeMMuv3HqHf6p83Xa73mp15HNuEnS6yIzZaG5QUpnAiEAxCme7qJaYStpZb5kZKDrbUziJ/lFuKymFc+poNpGIC4=

    Signature Algorithm: ECDSA-SHA384
         30:66:02:31:00:bf:fa:c7:6f:53:33:92:2b:9d:6f:fa:d0:79:
         4a:ed:20:1d:e1:2c:10:0f:79:fb:49:ba:db:50:f2:44:4f:57:
         0d:c9:15:e9:4c:07:ba:c9:3b:a5:20:1b:80:2d:a4:5e:73:02:
         31:00:90:7e:46:03:15:95:05:d8:7c:55:17:cf:1c:75:ea:09:
         8b:5f:54:78:b7:60:dc:de:a4:72:9e:c1:39:27:43:80:1e:04:
         58:97:a7:64:19:ad:39:87:84:0a:76:57:5c:ce

Rekor Entry

Details
{
  "body": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI4NjVlYmVjOWY1Mjg0MzljNzMwODZhNjJiMjU1ODM4OWYyZDkwODI5Zjk2YWMxOGI2MmU2MGJlMTEzMmRiM2UxIn19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FVUNJUUNxYTVMaTQ4blFuYXh2OEx1MDUyakFJUnJONlorcjBtZDhMdkpXbE9lTWp3SWdQeElrVWt3cFFESGMyTUZwYWdvMndjM1luUUthTlFra21VOEtNQVV1RzVjPSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVTXlha05EUVd3clowRjNTVUpCWjBsVldEWmlkWGgyVFRkWlJqaEJiM0prZHpWUVFraENlVnBaYzBsSmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDVFUVhsTlZGRXhUVVJCTlZkb1kwNU5hbGwzVGtSQmVVMVVWWGROUkVFMVYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZvWnpCU1RraFlSV0ZhWWtSaFFsWlhlVTVUVlVGTWVtbHdNWE13ZEM4eU5tWTRXbFVLT0hCdE5UZDBSM0JWYUV4Q1dUQkdabU5PVW5oS1puUmxTelpJV2xGNmRXVkJRak4wVFdkbVUxRlVaSEJEV2xSUE1tRlBRMEZZTkhkblowWTJUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZuVmpSdkNuQXJiVEZ6VldaeFRGWktNMmRrTWxZMVdIaExhVWc0ZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDB4UldVUldVakJTUVZGSUwwSkRUWGRKV1VWbVpHMXNlbUZIUm5OTWJVNXZZak5XYTJGSFJubGxWVUpxWVVkR2NHSnRaREZaV0VwclRHMVNiQXBrYWtGd1FtZHZja0puUlVWQldVOHZUVUZGUWtKQ2RHOWtTRkozWTNwdmRrd3lSbXBaTWpreFltNVNla3h0WkhaaU1tUnpXbE0xYW1JeU1IZExkMWxMQ2t0M1dVSkNRVWRFZG5wQlFrTkJVV1JFUW5SdlpFaFNkMk42YjNaTU1rWnFXVEk1TVdKdVVucE1iV1IyWWpKa2MxcFROV3BpTWpCM1oxbHpSME5wYzBjS1FWRlJRakZ1YTBOQ1FVbEZabEZTTjBGSWEwRmtkMFJrVUZSQ2NYaHpZMUpOYlUxYVNHaDVXbHA2WTBOdmEzQmxkVTQwT0hKbUswaHBia3RCVEhsdWRRcHFaMEZCUVZveFQzSkdUVmxCUVVGRlFYZENTVTFGV1VOSlVVUXhjRzVxUkV4eU9YZzJhRE1yY1daT01USjFPVFZ4WkdWU2VtSm9TakIxYzJsTk1sZG9DblZWUmt0YWQwbG9RVTFSY0c1MU5tbFhiVVZ5WVZkWEsxcEhVMmMyTWpGTk5HbG1OVkppYVhOd2FGaFFjV0ZFWVZKcFFYVk5RVzlIUTBOeFIxTk5ORGtLUWtGTlJFRXlhMEZOUjFsRFRWRkRMeXR6WkhaVmVrOVRTelV4ZGl0MFFqVlRkVEJuU0dWRmMwVkJPVFVyTUcwMk1qRkVlVkpGT1ZoRVkydFdObFYzU0FwMWMyczNjRk5CWW1kRE1tdFliazFEVFZGRFVXWnJXVVJHV2xWR01raDRWa1k0T0dOa1pXOUthVEU1VldWTVpHY3pUalpyWTNBM1FrOVRaRVJuUWpSRkNsZEtaVzVhUW0xMFQxbGxSVU51V2xoWVRUUTlDaTB0TFMwdFJVNUVJRU5GVWxSSlJrbERRVlJGTFMwdExTMEsifX19fQ==",
  "integratedTime": 1775141410,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 1217560642,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1095673068\nlKWpTmEClcwQ7j06SSAFLEoHVORNrfLGjtLl2gs4e+E=\n\n— rekor.sigstore.dev wNI9ajBFAiAJXMhgRqC47+i5zFt8koaT4XXB/BCUG0kshWnbrGT+GwIhAJwuW0L/29xZrAZw9irNFENMAlNclKTia0Xae/CYupaD\n",
      "hashes": [
        "42130ac803e8c49d764fa8704f4cd4ebbbd2fc502c8f71718894e500d54811d9",
        "a61f8b1e098538972aa44b21ba24b8e2ee2a6381d8d3909673ef7e3707892c40",
        "10db32c5e5186d7a17a2d889dbf759cc75bcdcae7cbd0007f15281302fb4e4eb",
        "4dc34fdbad02564bb837fff16303bea568f2d286480da8fe97f9e9e7136bcb1d",
        "4aefe89ec76cc64ed14537c3f6845be158fd1f4bbd564c4558c03c59d7a7e370",
        "b16c706f78bd78ff280c49fa4756b4b54e3e2498f6c1b6053231b0735d58eb93",
        "0618f41bcc0725a670d718ed830b6f2eacbed4cdf16ed08d472036f8d24c8c10",
        "73d1de9ae4273a5f943a7c50d4e6b559f9c486ec373a7c078d0d156d75d799ac",
        "0e5017b58448a90fdfd02e2abdbdc71d418eef2583c869d4b4542be936fb6c67",
        "ec104daeda85a1a1eac514ab7fab48f43f9c4533f8f23b1c7e65c890be573589",
        "e0166fb9fbc940443e45f91cf49ba86ddc5947bfd4d8ac703ef3d9aec0ecc9b1",
        "e451098f66674a830c6b1151abca031ad1488ad23e99f4e2061aa5aaf9aec3af",
        "2830c54e489ea6b5531b688a13d2f91524b2b6ce51dbac8647cf1f60adbd2040",
        "6563017f9aef63af5e6a09f987e130e1313db6fe1d7a282122ef31328477c72d",
        "cd9d5a5bda30f7904b387fd4ccc36070336869654a4c27dca6794633d6bf5741",
        "b723ac045c230f72db85ad07c2ffbf1a342f0678f858bdf1e58be53fa8a3e04f",
        "5f476e9b50b1e63404c9d44335d10f4652bdd72609c58692bbce90804f91c015",
        "7737829c36da64254627f1522de475991e2127b1d718686dd348980f99a0590e",
        "dd0e895348b440bfa698e3b1f477c7ef0499fa6b13404fe86890826ce536ee0f",
        "6060ed80070255dec449fc007f5bc973dd310411e6f7a2632662b532f3937d0c",
        "0b6efb3532a52fbd2f6f4e2abe3a0f0bfdae255ff04581aa4326c1f4f83e547f",
        "0ce09ea12328bc8bcb13192122f8aca30f40b8d5e0796b3810293247a11ca985"
      ],
      "logIndex": 1095656380,
      "rootHash": "94a5a94e610295cc10ee3d3a4920052c4a0754e44dadf2c68ed2e5da0b387be1",
      "treeSize": 1095673068
    },
    "signedEntryTimestamp": "MEYCIQCs4JSgt88T7DIdwVbow4/xkcOxjP/uf39Aei/Bxj0UBAIhAOcXQLKSDzhCwJqqf3R1IJWIzBZwbmc8aa9ATINg0C3X"
  }
}