Skip to content

go/build/v2: honor vendor input - #2630

Draft
rakshitgondwal wants to merge 1 commit into
chainguard-dev:mainfrom
rakshitgondwal:fix/go-build-v2-vendor
Draft

go/build/v2: honor vendor input#2630
rakshitgondwal wants to merge 1 commit into
chainguard-dev:mainfrom
rakshitgondwal:fix/go-build-v2-vendor

go/build/v2: honor vendor input

b4fa619
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Sep 7, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514152550461606697620216051028976753708604128439 (0x5a0f65d2523bc42ac5e03c89729e61aa4b34fcb7)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Aug 26 14:42:20 2026 UTC
            Not After : Aug 26 14:52:20 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    b0:08:bf:33:17:a5:8d:57:ae:4f:4a:82:84:89:ff:
                    cc:12:40:4e:dd:26:7b:f3:f6:7e:5a:f4:cd:97:d8:
                    dc:fd
                Y:
                    7d:d2:27:dd:38:de:c7:3d:c6:c0:d2:2f:83:b9:40:
                    6a:fc:2c:4a:9d:20:c3:6f:40:47:e2:d3:05:9c:0d:
                    26:0d
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                0B:C6:8D:A8:71:C1:F3:FA:F3:F1:D3:F1:B7:D2:CC:23:AB:A7:0B:4E
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:rakshit.gondwal@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoD6Fo+AAAAQDAEYwRAIgF5n3kkFa2sZ9o2rr/qWgPq094VvOOnmwaDalS+Je7EICIDZrLvzuDMqw73rX+zMb8rkhkaNm2KGOn6QzhhRWRfn2

    Signature Algorithm: ECDSA-SHA384
         30:64:02:30:44:6d:90:8b:4e:78:ec:5b:2c:73:ed:02:cb:69:
         e3:d1:44:7d:9a:d5:b0:b4:79:7f:a2:ae:59:d8:83:a0:37:f0:
         3b:80:82:6a:99:f4:5c:23:4b:4b:74:18:81:60:b4:24:02:30:
         13:21:c0:0c:ee:0c:d8:e4:66:6a:27:76:42:57:bf:44:8f:dd:
         cc:01:db:1f:a7:92:fa:99:15:f3:2a:d6:35:39:b4:e0:7b:7a:
         82:fb:65:5d:4d:b2:d9:a5:b9:e2:15:a6

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1787755341,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 2603925951,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2627955081\nNfFN+Vho6dt/O+p8UF1g5/P9VCH2Kg6etJ5Clnq2XC4=\n\n— rekor.sigstore.dev wNI9ajBFAiBMFpNluRR6dCW9+DSchgtMYgsuMF0/ZjXeGzBr53qHZQIhAKP6P565IUd0wE/YecgUSQFx9fZcanA7GvLaR/p74O9L\n",
      "hashes": [
        "b65728b8f3b00b45dbfe64eb386c61c107f5c1e907d6652b2303f214c34a42e9",
        "9bbaf3756984530b11d9e6274842cb688b7ae1b39336313dd408b217f59ee114",
        "8dc64e7b255b4a345d70258b4c1b2f7c6766643161dc32edb3aec0dd497f8df4",
        "b83d7d6942e5e308d73c18110a5856adc38d693c4546fa13a2b2bfa09df86989",
        "f7afb861cc7cdcc6806cde6f8a5b4c8645a2e26c5ee39ea02bcac84a8e8b1012",
        "16b99959485cb90193780859a3fffd7875447a19f54951e6b78449aaf60d0ad6",
        "94cdda56222e6120e5187016b138e64f497ea6579be30995a53f9f59ca63ef70",
        "3dc2fdf950481aec15f8bd8ed38ea6097e4d16b25d44c4c11d85dcd184482770",
        "5b492b4fd82b9ebeb6b9defd46566b53b45f52f6636f6c1f5feef035e7bc8c1d",
        "15779de3711d1bb54af56bb39bd26b221ee0b1bd0dba2535d7d1ad80ac04520f",
        "f2c14feeaebc9e4f7257372eaf5d5a2699b3864388ea91334feddc8e4e4be80c",
        "85ee48db4ffb776a59957359b1185ab17a150d5fb685c17cd83a14980d162f2c",
        "978619d9389b6a32acdf4dc57966330a49b49ada266aaf07e9cb104655b0d17c",
        "4dcea729eac003b26554cb6d5668243d70221892b1d8237104863b3029da9b75",
        "2e60b615478453abe05bc3c78f94f3c7805e0fdf3188e86b820adf7cf6cd80aa",
        "0ed15ecd03bc05ab5d2dd0aafc05f4d6add37771d0872c2700a98fde55b86095",
        "a6ddca2606aabd1aa46c4df59f59c54c2d2633d05e1545f64dde7e9a49be089e",
        "e8fd76b9581b63781495407d3c8ba24e6a926283d1cd9f15beba5d265dcb8e60",
        "de27fa8b322c88deefbff3a9b266ece2b2543fac7c526f26bc30f58ed2c13576",
        "7a7f51103b8e5664ee87e6e5cc1b617212a9a891274cfce48bd5a29cf857654e",
        "5dc5f72b51bf70b2a8bbce31e159ad3925406a248c5855ab37a1b69fb10f5446",
        "a89e5ec3559a6d5bd189c34df1035733e734ea4b03890ccdc12e31d8d7b28910",
        "48c6e49774115dab6a722b5b71ee0bbebabd495afbdfd1b09179e05ddcd70fdb",
        "28db8055029784e84527685f07b59526ef02c1cb499306b4a8df12513b97e997",
        "082e622b46194bca07a46a118f9d262c610a856d5434ec2003208a22256853e7",
        "6fcd3f27febc442f3fb71e7145d94a93a3264e9662551a2daae581ac4ff3d692",
        "b4df235d5f9e7c9c20e38556c6fcb699c785bf774dba51efc913793947167df6",
        "4ebd64f3f4170a218ee3f9a3277350598ce73b43ae2962fd2ab5e3ed481afec4",
        "4a775b30a56d7137a7024c22d8905f1b30fe9a17b1a75a896d1218f80d494485",
        "c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
      ],
      "logIndex": 2482021689,
      "rootHash": "35f14df95868e9db7f3bea7c505d60e7f3fd5421f62a0e9eb49e42967ab65c2e",
      "treeSize": 2627955081
    },
    "signedEntryTimestamp": "MEUCIFEYNBGe6+9D0jMQY9bv3IIVGgs6rd8zJ0b0G1AOUXXvAiEAtLrdyFTr2jGlG5cf1LyJOkxugoevIwJGmmz+VnR7zaM="
  }
}