Skip to content

Merge pull request #11656 from teacup-on-rockingchair/sle_update_stig… #2241

Merge pull request #11656 from teacup-on-rockingchair/sle_update_stig…

Merge pull request #11656 from teacup-on-rockingchair/sle_update_stig… #2241

Triggered via push March 7, 2024 11:27
Status Success
Total duration 4m 29s
Artifacts

k8s-content.yaml

on: push
container-main  /  container
4m 2s
container-main  /  sign
5s
container-main  /  sbom
11s

Annotations

1 warning and 4 notices
container-main / sbom
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: anchore/sbom-action/download-syft@v0.15.8. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:7b3d96c8b793f9708dc2df09f20c0ee76fb72d09fca0a95d7dc76effa42711a9 | jq '.[0]'
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:7b3d96c8b793f9708dc2df09f20c0ee76fb72d09fca0a95d7dc76effa42711a9 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:7b3d96c8b793f9708dc2df09f20c0ee76fb72d09fca0a95d7dc76effa42711a9 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Verify SBOM attestation
COSIGN_EXPERIMENTAL=1 cosign verify-attestation ghcr.io/complianceascode/k8scontent@sha256:7b3d96c8b793f9708dc2df09f20c0ee76fb72d09fca0a95d7dc76effa42711a9 | jq '.payload |= @base64d | .payload | fromjson | select(.predicateType == "https://spdx.dev/Document") | .predicate.Data | fromjson'