Skip to content

Merge pull request #695 from Vincent056/ocp-11228 #376

Merge pull request #695 from Vincent056/ocp-11228

Merge pull request #695 from Vincent056/ocp-11228 #376

Triggered via push October 3, 2025 01:41
Status Success
Total duration 3h 11m 16s
Artifacts 5
bundle-container-push-latest  /  container
51s
bundle-container-push-latest / container
must-gather-latest  /  container
43s
must-gather-latest / container
openscap-container-push-latest  /  container
2m 7s
openscap-container-push-latest / container
operator-container-push-latest  /  container
3h 9m
operator-container-push-latest / container
bundle-container-push-latest  /  sign
10s
bundle-container-push-latest / sign
must-gather-latest  /  sign
11s
must-gather-latest / sign
openscap-container-push-latest  /  sign
7s
openscap-container-push-latest / sign
operator-container-push-latest  /  sign
10s
operator-container-push-latest / sign
catalog-container-push-pr  /  container
1m 4s
catalog-container-push-pr / container
catalog-container-push-pr  /  sign
8s
catalog-container-push-pr / sign
Fit to window
Zoom out
Zoom in

Annotations

1 warning and 15 notices
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals: images/must-gather/Dockerfile.ocp#L6
JSONArgsRecommended: JSON arguments recommended for ENTRYPOINT to prevent unintended behavior related to OS signals More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/must-gather-ocp@sha256:fd1ce6f7c36ece0c73f64f0f7754b46f7ae921cb77d8ca050db7d2d74234ab92 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/must-gather-ocp@sha256:fd1ce6f7c36ece0c73f64f0f7754b46f7ae921cb77d8ca050db7d2d74234ab92 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/must-gather-ocp@sha256:fd1ce6f7c36ece0c73f64f0f7754b46f7ae921cb77d8ca050db7d2d74234ab92 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:d064895ebc3e88e5fb85b9168a0acf7d405f3ceb334b10ed19a97935eed7b084 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:d064895ebc3e88e5fb85b9168a0acf7d405f3ceb334b10ed19a97935eed7b084 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:d064895ebc3e88e5fb85b9168a0acf7d405f3ceb334b10ed19a97935eed7b084 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:f71e2b8436cbd28d90975f61748ce09504d2edaa2732a42d128b9608dd37aaf1 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:f71e2b8436cbd28d90975f61748ce09504d2edaa2732a42d128b9608dd37aaf1 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:f71e2b8436cbd28d90975f61748ce09504d2edaa2732a42d128b9608dd37aaf1 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4084a579001919ce0ea37c92bf9cc35587ef83c86246bfd7be73f585404c3eeb | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4084a579001919ce0ea37c92bf9cc35587ef83c86246bfd7be73f585404c3eeb | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4084a579001919ce0ea37c92bf9cc35587ef83c86246bfd7be73f585404c3eeb | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:1f71391791304976b084c8ac484d80f0f607226e39e9788d1b3bc848d979d529 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:1f71391791304976b084c8ac484d80f0f607226e39e9788d1b3bc848d979d529 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:1f71391791304976b084c8ac484d80f0f607226e39e9788d1b3bc848d979d529 | jq '.[0]'

Artifacts

Produced during runtime
Name Size Digest
ComplianceAsCode~compliance-operator~2VSTJ0.dockerbuild Expired
135 KB
sha256:7bedec14956c85dbb4e58ff69f8c9f94df2fbf2960ab75e65fe61b66a6c94260
ComplianceAsCode~compliance-operator~4PBC44.dockerbuild Expired
41.7 KB
sha256:6ce8f9511180aefece091c58d84bb07cb2417cdee30418849015f2eb93ccbf0f
ComplianceAsCode~compliance-operator~9W6HPE.dockerbuild Expired
104 KB
sha256:2efe3e7dc68ad30e31544e5e2e7022c5aecc24e41563f329aeb3d4b15a4fb7d7
ComplianceAsCode~compliance-operator~CUTALX.dockerbuild Expired
48.5 KB
sha256:fb20c572da485ae5aeac9a4c2c30b10c3e7a5090158620e9905dc7c0bf504421
ComplianceAsCode~compliance-operator~YF6CR6.dockerbuild Expired
111 KB
sha256:82cb1ee33d9ef28b8008415b149d71ea45eab85b29cacdd5b03d461e85c63104