Skip to content

Release PR image

Release PR image #1772

Triggered via workflow run October 9, 2025 09:52
@renovaterenovate[bot]
completed cfcd702
Status Success
Total duration 7m 29s
Artifacts 4

release-pr.yml

on: workflow_run
Get PR number
5s
Get PR number
bundle-container-push-pr  /  container
1m 26s
bundle-container-push-pr / container
openscap-container-push-pr  /  container
58s
openscap-container-push-pr / container
operator-container-push-pr  /  container
4m 56s
operator-container-push-pr / container
bundle-container-push-pr  /  sign
8s
bundle-container-push-pr / sign
openscap-container-push-pr  /  sign
9s
openscap-container-push-pr / sign
operator-container-push-pr  /  sign
9s
operator-container-push-pr / sign
catalog-container-push-pr  /  container
38s
catalog-container-push-pr / container
catalog-container-push-pr  /  sign
9s
catalog-container-push-pr / sign
Comment on the PR
16s
Comment on the PR
Fit to window
Zoom out
Zoom in

Annotations

12 notices
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:eb77a3b9cfc95db309a0f2f5537590353fc70bc0c18b1f14d4093dc58b0adcc1 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:eb77a3b9cfc95db309a0f2f5537590353fc70bc0c18b1f14d4093dc58b0adcc1 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:eb77a3b9cfc95db309a0f2f5537590353fc70bc0c18b1f14d4093dc58b0adcc1 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:e5663c1ba7fe4a0dea2bd609d88765db040500a66bbda2190183b1e95a7a0808 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:e5663c1ba7fe4a0dea2bd609d88765db040500a66bbda2190183b1e95a7a0808 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:e5663c1ba7fe4a0dea2bd609d88765db040500a66bbda2190183b1e95a7a0808 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:967da04807393b855782c7d907ed213f71b33480184bd138b533ada0ff2d841d | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:967da04807393b855782c7d907ed213f71b33480184bd138b533ada0ff2d841d | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:967da04807393b855782c7d907ed213f71b33480184bd138b533ada0ff2d841d | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:88ee18b322c00d976fe55862e40689ca6c8902348dbaaecac9c0d6b7528d2290 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:88ee18b322c00d976fe55862e40689ca6c8902348dbaaecac9c0d6b7528d2290 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:88ee18b322c00d976fe55862e40689ca6c8902348dbaaecac9c0d6b7528d2290 | jq '.[0]'

Artifacts

Produced during runtime
Name Size Digest
ComplianceAsCode~compliance-operator~0KZSM5.dockerbuild Expired
52.2 KB
sha256:b5c5bd295cd92156f982b3c659e5ab9e7f6d4de2261ee5c0b1bc71a751d9f204
ComplianceAsCode~compliance-operator~FT7JMH.dockerbuild Expired
31.1 KB
sha256:76895cdca099bfcf449a6540339d4a9c06cff45fc74487e59a37f28a70fa09ee
ComplianceAsCode~compliance-operator~OP5MHR.dockerbuild Expired
52.7 KB
sha256:934e2954a5f54799483298f2e60bc5a8ace486f1c77cf8267af514edbb1acbde
ComplianceAsCode~compliance-operator~PMEGJ2.dockerbuild Expired
40.6 KB
sha256:4da770ba063792db68ecc3e98f0a0cfe8717f79f23b9f5fd8088c86f4933af53