Merge pull request #731 from rhmdnd/fix-test-broken-content-workflow #356
rhmdndrelease-latest.yml
on: push
bundle-container-push-latest
/
container
38s
must-gather-latest
/
container
41s
openscap-container-push-latest
/
container
1m 50s
operator-container-push-latest
/
container
3h 1m
must-gather-latest
/
sign
9s
openscap-container-push-latest
/
sign
9s
catalog-container-push-pr
/
sign
10s
Annotations
1 warning and 15 notices
|
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals:
images/must-gather/Dockerfile.ocp#L6
JSONArgsRecommended: JSON arguments recommended for ENTRYPOINT to prevent unintended behavior related to OS signals
More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
|
|
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:35fed95114f762fa64016121f75eb2217702c13da863deb5362526fc6e6292cc | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
|
|
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:35fed95114f762fa64016121f75eb2217702c13da863deb5362526fc6e6292cc | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
|
|
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:35fed95114f762fa64016121f75eb2217702c13da863deb5362526fc6e6292cc | jq '.[0]'
|
|
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/must-gather-ocp@sha256:36846cfa46b6c8f076015c3f3fe0b9fd1722b8eb4cf1da8a09468dcfeacb4911 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
|
|
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/must-gather-ocp@sha256:36846cfa46b6c8f076015c3f3fe0b9fd1722b8eb4cf1da8a09468dcfeacb4911 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
|
|
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/must-gather-ocp@sha256:36846cfa46b6c8f076015c3f3fe0b9fd1722b8eb4cf1da8a09468dcfeacb4911 | jq '.[0]'
|
|
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:5bce7e34e7e1cd17c29c5bf2cfb9e19bc2558c8dfc84b5e6282fac1f6c92cba2 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
|
|
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:5bce7e34e7e1cd17c29c5bf2cfb9e19bc2558c8dfc84b5e6282fac1f6c92cba2 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
|
|
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:5bce7e34e7e1cd17c29c5bf2cfb9e19bc2558c8dfc84b5e6282fac1f6c92cba2 | jq '.[0]'
|
|
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4642856b541995646d6e416820e1d6fbe69a48b0f257e156a77759f9484156d4 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
|
|
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4642856b541995646d6e416820e1d6fbe69a48b0f257e156a77759f9484156d4 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
|
|
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4642856b541995646d6e416820e1d6fbe69a48b0f257e156a77759f9484156d4 | jq '.[0]'
|
|
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:10bd10f82bb4ad4e902abad14ad838ed4450d342d768e841a6b05a70fbe3fa48 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
|
|
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:10bd10f82bb4ad4e902abad14ad838ed4450d342d768e841a6b05a70fbe3fa48 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
|
|
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:10bd10f82bb4ad4e902abad14ad838ed4450d342d768e841a6b05a70fbe3fa48 | jq '.[0]'
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
ComplianceAsCode~compliance-operator~C1W397.dockerbuild
Expired
|
105 KB |
sha256:003724fe702f874f96793b1a38e813dbccd5b3262a912832ca8f15d12e8f1e91
|
|
|
ComplianceAsCode~compliance-operator~KKFX4E.dockerbuild
Expired
|
41.1 KB |
sha256:13680599a365895b260c8f925a073853e8715265061795f7e8c1877ee941b73e
|
|
|
ComplianceAsCode~compliance-operator~M6XVN4.dockerbuild
Expired
|
49.4 KB |
sha256:faa8182c24ac8e3e09f6178be01d4d50b8981fa85c6f3274760a3b5fb277b971
|
|
|
ComplianceAsCode~compliance-operator~ONVX1A.dockerbuild
Expired
|
135 KB |
sha256:55e7a761efa26f9430a063164cbe00048e0f9a484184a2978608a5bf0c21fc32
|
|
|
ComplianceAsCode~compliance-operator~S79F03.dockerbuild
Expired
|
103 KB |
sha256:ec2e2932166e043b06d339a0160a549f7c17a50630b4dd05535a6456582f5171
|
|