Merge pull request #12791 from matusmarhefka/unauthorized_world_writable #3083
Annotations
1 warning and 3 notices
|
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Sign image
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:a5e167b0edabbd244a8082375fac3db951775ccf8a153ab04e5ae48d8aa1f034 | jq '.[0]'
|
|
Sign image
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:a5e167b0edabbd244a8082375fac3db951775ccf8a153ab04e5ae48d8aa1f034 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
|
|
Sign image
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/complianceascode/k8scontent@sha256:a5e167b0edabbd244a8082375fac3db951775ccf8a153ab04e5ae48d8aa1f034 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
|
Loading