Skip to content

Release PR image

Release PR image #1784

Triggered via workflow run October 15, 2025 14:49
@rhmdndrhmdnd
completed cfcd702
Status Success
Total duration 7m 46s
Artifacts 4

release-pr.yml

on: workflow_run
Get PR number
7s
Get PR number
bundle-container-push-pr  /  container
1m 30s
bundle-container-push-pr / container
openscap-container-push-pr  /  container
58s
openscap-container-push-pr / container
operator-container-push-pr  /  container
5m 1s
operator-container-push-pr / container
bundle-container-push-pr  /  sign
13s
bundle-container-push-pr / sign
openscap-container-push-pr  /  sign
9s
openscap-container-push-pr / sign
operator-container-push-pr  /  sign
18s
operator-container-push-pr / sign
catalog-container-push-pr  /  container
1m 7s
catalog-container-push-pr / container
catalog-container-push-pr  /  sign
8s
catalog-container-push-pr / sign
Comment on the PR
14s
Comment on the PR
Fit to window
Zoom out
Zoom in

Annotations

12 notices
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:11df89c65cd7d7c24ef747be15a158ca83ce685a549884d69133b8fb4316e1ee | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:11df89c65cd7d7c24ef747be15a158ca83ce685a549884d69133b8fb4316e1ee | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:11df89c65cd7d7c24ef747be15a158ca83ce685a549884d69133b8fb4316e1ee | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:1563965131415c01e58f56f09d02fc4361ab0514f20d10d3c75a9fb11fa61609 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:1563965131415c01e58f56f09d02fc4361ab0514f20d10d3c75a9fb11fa61609 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:1563965131415c01e58f56f09d02fc4361ab0514f20d10d3c75a9fb11fa61609 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:b00a2b3f20cd618079ee2a2bafc0f219b70d8b42aed923570c7bfc4338dc54be | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:b00a2b3f20cd618079ee2a2bafc0f219b70d8b42aed923570c7bfc4338dc54be | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:b00a2b3f20cd618079ee2a2bafc0f219b70d8b42aed923570c7bfc4338dc54be | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:10c5b2cd23640ae218f5af10528d3da7f31be67fd8a32559aacaedfce8a83a40 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:10c5b2cd23640ae218f5af10528d3da7f31be67fd8a32559aacaedfce8a83a40 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:10c5b2cd23640ae218f5af10528d3da7f31be67fd8a32559aacaedfce8a83a40 | jq '.[0]'

Artifacts

Produced during runtime
Name Size Digest
ComplianceAsCode~compliance-operator~J4BG2B.dockerbuild Expired
53.7 KB
sha256:b6e5f61f93b20d5e7ce00b14e6e2ee41116ffc14d0d80d5eaebf7b7e78e78ab8
ComplianceAsCode~compliance-operator~THO9XV.dockerbuild Expired
31.2 KB
sha256:ea4405109cc793a199871fff726fb8a53cef8f19e60bfcfc7ee7ef11585d075f
ComplianceAsCode~compliance-operator~XR7ABC.dockerbuild Expired
52.6 KB
sha256:5bb06fb5275ea545c7d513852ed4226529639d3bca6705dc930f2f89a364d8a4
ComplianceAsCode~compliance-operator~ZPAJFH.dockerbuild Expired
41 KB
sha256:708c67bbe72fc082c33685b518212d56a553ca45517ebaafd37cfbdb830f2c96