Skip to content

accounts: fix shadow/gshadow bug and add comprehensive tests

b912f8f
Select commit
Loading
Failed to load commit list.
Draft

account management: update shadow entries when adding users #2054

accounts: fix shadow/gshadow bug and add comprehensive tests
b912f8f
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded Mar 27, 2026 in 0s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221094139930535730121115562958865384660712306238 (0x26ba3441387c0ac3aed141d78847aa7c2e4c363e)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Feb 4 07:28:13 2026 UTC
            Not After : Feb 4 07:38:13 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    df:85:12:b1:cb:f0:3d:a6:93:ec:e2:c2:15:44:d2:
                    3f:a4:07:ea:55:7e:d1:01:88:8a:4f:4c:2e:0d:35:
                    19:4f
                Y:
                    ef:39:56:18:a8:ea:86:04:2c:bb:d6:cc:b3:c7:60:
                    e6:32:d2:51:15:23:70:7c:f3:a0:9f:0e:0e:38:c8:
                    9e:bf
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                BC:1C:89:DE:86:84:B1:18:7F:59:45:9C:7A:5E:A7:1E:53:F3:29:79
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:steve.beattie@chainguard.dev
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Signed Certificate Timestamp:
                BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABnCeNO9wAAAQDAEYwRAIgHHanwCThGKbvyIdO6QKRMdkAhHUTpiXSe1LDODePM8QCIGj281OcmsXaAmgC1xCEUII0y++ha70JUcjuUfY81eSF

    Signature Algorithm: ECDSA-SHA384
         30:66:02:31:00:80:7f:f6:4c:77:24:bc:6e:bf:c4:d8:2d:44:
         5c:04:e4:0e:e3:d4:c6:dc:86:cf:37:05:19:9b:76:e2:d9:ca:
         ee:63:c5:32:11:b7:c3:df:bf:ac:ff:fd:cf:34:ae:b8:90:02:
         31:00:be:64:26:2d:31:b8:2d:61:49:8d:46:05:7c:d6:7c:85:
         2e:4f:53:e3:df:fa:c3:59:e9:58:b3:ac:5b:b7:0b:5e:3f:bd:
         4f:5d:4d:2a:df:20:89:e4:fe:e5:b6:b5:bf:d6

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1770190093,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 910240660,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n1067573508\ngavtVR5SdvX9rs4CbBxDI30nSOjFx3AjpIWf85I4hjA=\n\n— rekor.sigstore.dev wNI9ajBFAiBuXWXyC7pFKvmqySQLYMCSGwy9rCGRb0WIYBqBMNPQDQIhAPFMRtLnU1SweBjnoNfviljn+sDkAoA9i7/Xu4LO+4Im\n",
      "hashes": [
        "a8dc6f6e9dc04c50373b5aec6f67844a89dd35d99a8e5c5f0fb44f31949ee0e6",
        "90fca53ce1a4db6455ebcff49fc5fa20ed46656352fb00b772551999e05cae50",
        "411daf9508948930795be3ea7de6880069319d84a64f91b7729cea30bdeae963",
        "981994332219cba10be80877e49f528976272a55866ec1e32f37975ecf382b38",
        "b80c875a8bb37ae1d8f2d866376d5906aca52d5415ce390e575d85ec4559199a",
        "2239e12b8ae104b8ff69509aae2889fe011e8878c798b4e7467fef4114c555ac",
        "afdb059486fa5d8e67fc7294ee1bb7fa9bebcb2a6e9201543d3e5e00feee5ed3",
        "4595b15f793aa11b5021db57ee13400254d58dfac07aafae27cebd7d9d393891",
        "86cb4e0516ef8a074c522334eacb088a0546afc1cf043f622921fe58adda2f3a",
        "fc45875cecea1855e8da3709a727dccaf26bf7d724cc91632bccaa1c9c84f95a",
        "faad19886b0ef84337150216493ce03f284a09c1e2adfc597baf9b7572f84825",
        "f8980ded7280bd35cb0669bbb2d42d037e246322a1e3ed9bb4bd4a1e1ecd6c3c",
        "5f86ff6777b0df0e95cafe4a5b1332a84ac0066cce326160a2e31a8f53a8ec66",
        "70fcae4ee997c92490f73cb3190bdbf7b728d9b2a5c9bab764c23140de1615f6",
        "4c92cd2a84386d61f245f19d7330564c860f569f4c8592a35eb7eb9a02b7c45b",
        "4d66d1c725256bee52c2a624ff51e6a11a4b915ae49d5d8de7f3c5f1a7adfe13",
        "1d8816c7648831005d337a59623d0f2352cbdd1b6d09c7d4781d8ec24a75a1c1",
        "05791211086ed17f6904eb2e634467c9f19bc78258c37eb744aaa1d1d423f246",
        "79b5781085257bc7c42107835cd49d51037a1fb8a62191d3d2223dee14d0d09c",
        "9c04fac600ecc7545db907c2f928259afb2637b02038b4ae0e9bf9acb4ecb0d5",
        "77cb49ecb7e6aae68d119859b09f9937f3b1b4317183d179f2d4bdb1bc36047f",
        "884298747ad975156be836e98c0f0b7309a8b7e4193a8799d41004baefc1beba",
        "4411e0de47d6ef8be46ad3128e8504319c6ce295e45facb77fdd3a15cd987346",
        "6043cc6a00b8605590326af07591cb39626e74ae91451b861d543cfee00369b2",
        "5c4fde93fcec0748da0f83bbe25c677effffb79792aebd1407c3d5092bf93899",
        "c9e09601af778616b56012ae167f77cc1cca6ea416ded607ae0912a7953b9dd5",
        "e0ee98c4a82e159184afb5ec6b786a34037642aeee5556adfc857899ab13e7bd",
        "17d3124394a6a05afe868003725a5d158e76fd32df1c39cd3d86fd64d60ee602",
        "dd81a409831b55907301e541dfbfc02adec722500c5d4d15d9ef72cdaba3a99b",
        "4f80ea583e36840b4dfaf5fc8ca096aa80b899e13825e908f4bc5818270fcb53"
      ],
      "logIndex": 788336398,
      "rootHash": "81abed551e5276f5fdaece026c1c43237d2748e8c5c77023a4859ff392388630",
      "treeSize": 1067573508
    },
    "signedEntryTimestamp": "MEUCIB2Jl42CKKD/BqNoXM4mPCli+oqHNVy+NgJJVjXV/CG0AiEA+whU4p+b6E9XPSXEHIDBMVm79Cl0fqtI6Yq864GKy9U="
  }
}