Parse PKGINFO once and reuse parsed structure everywhere #2002
Chainguard Enforce / Enforce - Commit Signing
succeeded
Jan 13, 2026 in 0s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354811663399828596387499889294774334961058630106 (0x3e264e24d4b5741b3441417a258b68684488c9da)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Jan 12 15:32:28 2026 UTC
Not After : Jan 12 15:42:28 2026 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
11:8b:26:35:10:76:a9:96:11:7c:31:56:e1:f5:99:
5f:16:b4:ed:cf:92:d0:5d:67:ff:d2:c0:27:ed:12:
9d:b8
Y:
19:5e:4e:4e:05:e5:54:c0:f6:a4:a4:89:76:1d:01:
56:0e:8e:57:43:ea:93:1a:64:ad:ff:53:1f:9e:ac:
34:b6
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
A3:F9:1E:3D:79:D3:31:7D:CA:7A:19:1B:BD:51:E2:60:EC:C4:8B:87
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:[email protected]
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABm7LWT14AAAQDAEYwRAIgEwEFBjwYPefTnssXy7WSJiPSD/CsblxS5AkpZ/Ju/TcCIBuVAzDyPqFA0s+GMFfgef+WyVEu1a4mVn/PmERxaKY2
Signature Algorithm: ECDSA-SHA384
30:65:02:31:00:84:84:d5:4a:4d:e6:e0:c9:49:75:9b:7a:8c:
6f:e5:41:4e:a0:ed:73:3a:3f:7d:25:ab:f1:1d:07:96:79:8f:
4f:50:2a:c0:e0:4f:ad:0a:8e:91:8e:f9:a5:10:59:a5:6d:02:
30:35:12:5c:9f:e1:fe:49:75:78:12:f8:76:09:22:ca:57:d8:
32:3f:70:55:46:fa:a7:0e:f4:bb:59:81:9c:0a:17:3d:bf:0e:
b6:98:11:0e:dd:41:64:05:fc:28:1d:8d:52
Rekor Entry
Details
{
"body": "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",
"integratedTime": 1768231948,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 814735623,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n693884647\nUs5WpPmmH9ETjC0OImVX/JMnRfVMPIJVKAi2quNUEzI=\n\n— rekor.sigstore.dev wNI9ajBEAiBgwdQdbSNubeL9V1B04qVLPvQR3L9bJbtNBV7A1Q8F3AIgEoloedTJROXu/3JT8jfzSVO2ysefMYh0oo1AGcbXWhk=\n",
"hashes": [
"c9ec6c75fee01134b05061d93738c2024ac4cbab2d3436d416199bcd5e2e7bd1",
"1b136cdb3ce50bde36997897ba706cd70b2a0d48fbec89967847778b9e7fdaa0",
"74661e9d860eca7afc8841addc65503d6336b9e2dde638e9324cb00cf7044abb",
"c27385d9db522601ba0ee2e32f74848657c4b74813091a7d29d4e3d8fc090d22",
"e84ce2e108d29b7c089169303e7d8a0b545f59797bdd44cce1da60ba1a15db57",
"364f8a16725ea3a2a82fd2c6e96903589caee006b6290c65959d762dac1a888f",
"b8a79b89ab74572f0fe1ff184a786dfb61313b9889da9bc848c76da6c6683dec",
"46008787eb8bf9ba277d945b0341ca48f2d989cec3eb2ee1e5e8bb2666bc766e",
"ed9e1801961cf35337c4338f657cdca36d36f55972408d65fb512cee2b617f80",
"11915f25d923986745abf0ed805a52b203beef88c79b8bf3e34640b47478b52e",
"458d5acd7200ba399afcbb3cf0b28816c659457980eba3d91e6c2664d0391a68",
"e1626f6bb28a8fff791d6f0f7932e50386051ba5efa04138a84f9426adae15d2",
"98323227c81479334bcde7de8837f9ffa1cdcdfe1c3cd48ef7492ef5d7203b11",
"1aecc4fce4bd9f8df3981c3fb403ed60a32340d91e08e6d1a03d7333cb0b538f",
"07f2f4cd816d9b481d5a9e8881e5bc29c41f5f5a9a024dcd1cf70df2962ee74a",
"03ea77ebdd3d5d51cd28ad6a1d618c33640fa1fdead10ff485173879dc937e1c",
"ae05fec7e7e345f5659d1aa58923317c10e4ee037649acb76035809c59cb5df1",
"48890df70df2c7878d0018d0460d013d3c7de6c951e4fe559c8a00a71d157216",
"c8828996ba20826f07cb9b1229ed20e1ae65464caa3fcf4c839205f6169580a2",
"d44cafb6d6253828498fc8e4200c560af8f6cd8c5598135a7af755996305d872",
"17498da198b7928b8eac74a0dc81a4f10ad7726b11bcd5a6be0044029e09e144",
"da6273f8c054f1cb2bfc6ca1056bedcf720cb6462f99025bab97e22f50086f3c",
"40d3826bf31d2c5e3f63f0ca53fa284838dd4caa9d0cda66e684857dfcb71311",
"17d3124394a6a05afe868003725a5d158e76fd32df1c39cd3d86fd64d60ee602",
"4f80ea583e36840b4dfaf5fc8ca096aa80b899e13825e908f4bc5818270fcb53"
],
"logIndex": 692831361,
"rootHash": "52ce56a4f9a61fd1138c2d0e226557fc932745f54c3c82552808b6aae3541332",
"treeSize": 693884647
},
"signedEntryTimestamp": "MEUCIC1LeXV/dNzWFAsnf0Nq+8W9DUMFX2wCKAW5EFXZisg8AiEAqwGaFoYtGAENtKv1tFPQI13fyMtCakyA2xpvyPys3BA="
}
}
Loading