Skip to content

Release PR image

Release PR image #1789

Triggered via workflow run October 15, 2025 22:42
@Vincent056Vincent056
completed cfcd702
Status Success
Total duration 7m 0s
Artifacts 4

release-pr.yml

on: workflow_run
Get PR number
4s
Get PR number
bundle-container-push-pr  /  container
1m 29s
bundle-container-push-pr / container
openscap-container-push-pr  /  container
1m 0s
openscap-container-push-pr / container
operator-container-push-pr  /  container
5m 7s
operator-container-push-pr / container
bundle-container-push-pr  /  sign
8s
bundle-container-push-pr / sign
openscap-container-push-pr  /  sign
6s
openscap-container-push-pr / sign
operator-container-push-pr  /  sign
9s
operator-container-push-pr / sign
catalog-container-push-pr  /  container
54s
catalog-container-push-pr / container
catalog-container-push-pr  /  sign
11s
catalog-container-push-pr / sign
Comment on the PR
15s
Comment on the PR
Fit to window
Zoom out
Zoom in

Annotations

12 notices
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:08b2b27594610e8347b3778e897b8b64eba5b1b31571a207440a59d129d575a6 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:08b2b27594610e8347b3778e897b8b64eba5b1b31571a207440a59d129d575a6 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/openscap-ocp@sha256:08b2b27594610e8347b3778e897b8b64eba5b1b31571a207440a59d129d575a6 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:8ccb2ee174925785a818b98026ab421957f4ddd2545d0d41f47425f2610a8590 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:8ccb2ee174925785a818b98026ab421957f4ddd2545d0d41f47425f2610a8590 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-bundle@sha256:8ccb2ee174925785a818b98026ab421957f4ddd2545d0d41f47425f2610a8590 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:de145bf355a85dc544c9825ee5618e78baab485b5a31d2c604233bdbc7971729 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:de145bf355a85dc544c9825ee5618e78baab485b5a31d2c604233bdbc7971729 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator@sha256:de145bf355a85dc544c9825ee5618e78baab485b5a31d2c604233bdbc7971729 | jq '.[0]'
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:5dd79ffc536908dafba8e004f7aa15974a80ccba5af91a9f03a6a9c15f1b8e7b | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:5dd79ffc536908dafba8e004f7aa15974a80ccba5af91a9f03a6a9c15f1b8e7b | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/compliance-operator-catalog@sha256:5dd79ffc536908dafba8e004f7aa15974a80ccba5af91a9f03a6a9c15f1b8e7b | jq '.[0]'

Artifacts

Produced during runtime
Name Size Digest
ComplianceAsCode~compliance-operator~3UKCAU.dockerbuild Expired
29.5 KB
sha256:f4566f146442c5b9358db8531fbb4535fc0bd635b68de6320c46498fa5bd6d03
ComplianceAsCode~compliance-operator~JG8584.dockerbuild Expired
52.9 KB
sha256:3047d50be9011341fc8887d6ae2db65ce14ca2dcd2468c1b72e0dd435df0305b
ComplianceAsCode~compliance-operator~XMY8QH.dockerbuild Expired
40.7 KB
sha256:a770b26bf06b97517acfb4dce1045a26b139a621448501d7fb054fa35a334740
ComplianceAsCode~compliance-operator~YGNG4Y.dockerbuild Expired
53.4 KB
sha256:dea99322098f749a66a9576697e49c49bdb2722c91a4ff185ce65a7901692e11