Skip to content

Release PR image

Release PR image #1786

Triggered via workflow run October 15, 2025 20:19
@ralphbeanralphbean
completed cfcd702
Status Success
Total duration 6m 40s
Artifacts 4

release-pr.yml

on: workflow_run
Get PR number
9s
Get PR number
bundle-container-push-pr  /  container
1m 23s
bundle-container-push-pr / container
openscap-container-push-pr  /  container
48s
openscap-container-push-pr / container
operator-container-push-pr  /  container
4m 54s
operator-container-push-pr / container
bundle-container-push-pr  /  sign
7s
bundle-container-push-pr / sign
openscap-container-push-pr  /  sign
11s
openscap-container-push-pr / sign
operator-container-push-pr  /  sign
8s
operator-container-push-pr / sign
catalog-container-push-pr  /  container
45s
catalog-container-push-pr / container
catalog-container-push-pr  /  sign
12s
catalog-container-push-pr / sign
Comment on the PR
13s
Comment on the PR
Fit to window
Zoom out
Zoom in

Annotations

12 notices
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:77d47f44bf1892709ea315f365d78c64cc530f179a680813bb14702d084bef54 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:77d47f44bf1892709ea315f365d78c64cc530f179a680813bb14702d084bef54 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:77d47f44bf1892709ea315f365d78c64cc530f179a680813bb14702d084bef54 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:f9b002147101fc96cc2a4646a5f63bdbdb7ea3d5af72f9dbcd9bc03e834ad9d3 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:f9b002147101fc96cc2a4646a5f63bdbdb7ea3d5af72f9dbcd9bc03e834ad9d3 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:f9b002147101fc96cc2a4646a5f63bdbdb7ea3d5af72f9dbcd9bc03e834ad9d3 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:2f9acad5dd3cdcf273457d54efef210edb47a68823e0e9b50e67b61d9ef570ea | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:2f9acad5dd3cdcf273457d54efef210edb47a68823e0e9b50e67b61d9ef570ea | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:2f9acad5dd3cdcf273457d54efef210edb47a68823e0e9b50e67b61d9ef570ea | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:1950d86da377a19e65f05e54e88f808e15d44be096c381eb35bfacb98e520d96 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:1950d86da377a19e65f05e54e88f808e15d44be096c381eb35bfacb98e520d96 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:1950d86da377a19e65f05e54e88f808e15d44be096c381eb35bfacb98e520d96 | jq '.[0]'

Artifacts

Produced during runtime
Name Size Digest
ComplianceAsCode~compliance-operator~LT4E59.dockerbuild Expired
40.6 KB
sha256:049065a0768ee4530296f0253b21feefd39e4ff880404d31d92d9b49116e657b
ComplianceAsCode~compliance-operator~O82RM3.dockerbuild Expired
52.4 KB
sha256:be72ec92a6817e6192fd4b61943c785c58d992c798e827e8e7ba7b7927e97f9d
ComplianceAsCode~compliance-operator~PLHUYO.dockerbuild Expired
53.3 KB
sha256:b43b2e310ee654341f4ceffe9cfc783944a2fc28e484e68ba6c5143cd088c224
ComplianceAsCode~compliance-operator~SP3PD5.dockerbuild Expired
31.2 KB
sha256:e662e5130e478bafcf0b093016f1e8a2ed471e08aa91d342ba3ff0661d88a961