Skip to content

Release PR image

Release PR image #1778

Triggered via workflow run October 12, 2025 09:45
@renovaterenovate[bot]
completed cfcd702
Status Success
Total duration 6m 36s
Artifacts 4

release-pr.yml

on: workflow_run
Get PR number
7s
Get PR number
bundle-container-push-pr  /  container
1m 44s
bundle-container-push-pr / container
openscap-container-push-pr  /  container
48s
openscap-container-push-pr / container
operator-container-push-pr  /  container
4m 51s
operator-container-push-pr / container
bundle-container-push-pr  /  sign
8s
bundle-container-push-pr / sign
openscap-container-push-pr  /  sign
8s
openscap-container-push-pr / sign
operator-container-push-pr  /  sign
8s
operator-container-push-pr / sign
catalog-container-push-pr  /  container
53s
catalog-container-push-pr / container
catalog-container-push-pr  /  sign
9s
catalog-container-push-pr / sign
Comment on the PR
13s
Comment on the PR
Fit to window
Zoom out
Zoom in

Annotations

12 notices
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:044b411317633574b806c989d7cacab2cf69c2304872447a18c2457d9b5ede57 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:044b411317633574b806c989d7cacab2cf69c2304872447a18c2457d9b5ede57 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:044b411317633574b806c989d7cacab2cf69c2304872447a18c2457d9b5ede57 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:23a6e4d8b89087ff70299f02a873cde2d5bc56cb8a8607b36d0a4ef067564abc | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:23a6e4d8b89087ff70299f02a873cde2d5bc56cb8a8607b36d0a4ef067564abc | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:23a6e4d8b89087ff70299f02a873cde2d5bc56cb8a8607b36d0a4ef067564abc | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4ade38817654fa1149c4ef9cb867cef2b52c9373930edeea279fcc3aa53cba8f | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4ade38817654fa1149c4ef9cb867cef2b52c9373930edeea279fcc3aa53cba8f | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:4ade38817654fa1149c4ef9cb867cef2b52c9373930edeea279fcc3aa53cba8f | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:b828fac927ad6f3b519cb5199717e230fc366af251d5dcbe7ae867ea1e1831f8 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:b828fac927ad6f3b519cb5199717e230fc366af251d5dcbe7ae867ea1e1831f8 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:b828fac927ad6f3b519cb5199717e230fc366af251d5dcbe7ae867ea1e1831f8 | jq '.[0]'

Artifacts

Produced during runtime
Name Size Digest
ComplianceAsCode~compliance-operator~GED3RI.dockerbuild Expired
40.9 KB
sha256:b7f12b477421b11f7c0593e94c48978246947acc45c29436f1f51325ab273393
ComplianceAsCode~compliance-operator~KYE6T1.dockerbuild Expired
54.1 KB
sha256:f6a28315509c96550c5481ba51c45092015834ac8a41ca1d26926d7d358ab7f3
ComplianceAsCode~compliance-operator~MNIBS4.dockerbuild Expired
52.4 KB
sha256:0023fbd22a3f67ca21d814de8e2fc713e0b7f307dc2b12ade00fa2b5ae425539
ComplianceAsCode~compliance-operator~US0CU4.dockerbuild Expired
30.4 KB
sha256:1aa5c36c4f9188b31e12d0c27bbcc1b37011dd9090a59bfcd5a20ff9a58d611d