Skip to content

tarfs: keep mode bits and ownership from tar headers - #2455

Open
smoser wants to merge 2 commits into
chainguard-dev:mainfrom
smoser:fix/tarfs-dir-metadata
Open

tarfs: keep mode bits and ownership from tar headers#2455
smoser wants to merge 2 commits into
chainguard-dev:mainfrom
smoser:fix/tarfs-dir-metadata

tarfs: keep file and symlink ownership from tar headers

a45a6a4
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Sep 3, 2026 in 3s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262062417595929328466099348708402949426094680420 (0x2de749049dfb46669caa04789c41851361e22964)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Sep 2 19:19:22 2026 UTC
            Not After : Sep 2 19:29:22 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    50:9b:14:60:53:b0:4f:19:de:ed:98:9c:b8:a9:90:
                    3e:ec:1a:68:69:41:2e:e9:55:f8:df:bf:f5:81:d7:
                    ea:dd
                Y:
                    11:72:3b:0e:e9:77:ea:c9:49:6c:ff:97:5d:a1:74:
                    7e:a0:69:15:eb:a1:d9:99:2a:27:de:e7:3f:fa:57:
                    2e:d3
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                DE:EB:D8:93:5C:4B:CF:A0:F9:DD:83:F3:A5:7F:24:CA:0B:08:9E:87
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:scott-moser-work-v2@chainguard-workstations.iam.gserviceaccount.com
            oidcIssuer:
                https://accounts.google.com
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoGOPxz8AAAQDAEYwRAIgN0wVCD24FsDYBGmRCZVVLNrt9K4i3W75J35Yq7Arh4gCIBvL+jOxfUYjn13wozdM1idgh7U4xlfg8f0geVMFbHeG

    Signature Algorithm: ECDSA-SHA384
         30:66:02:31:00:a2:f1:44:a9:8b:af:b5:4d:1e:ce:1c:6d:40:
         b7:5b:ef:aa:55:05:1e:8b:f3:86:78:a8:af:73:30:84:b3:c8:
         cd:51:ec:84:2b:f9:1b:9c:9c:d1:4f:39:e1:61:a7:8c:e9:02:
         31:00:86:d5:4f:42:2a:c1:8e:1b:1c:7d:05:0d:8c:11:7d:f5:
         dc:29:5d:41:f4:07:61:f6:da:bd:05:bc:c1:68:46:39:aa:62:
         f8:c7:a8:c0:d3:0c:69:a6:23:ab:fe:c9:f6:7a

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1788376762,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 2689528075,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2581981201\nem1D6ljtcmgxV0CNVqaT6lIucOAv5W5UeZ6teLAs7LM=\n\n— rekor.sigstore.dev wNI9ajBFAiEAsi5v50/Z7qeUQ+8s4dBmf4tG9va1/e1wVr3zk7OTeqYCICPFgtIwNQpJ7bmSpXKbboTLFySTcpDCApp6FC5o1NAr\n",
      "hashes": [
        "c00034d0690dcc8ae8b32292e2b2be223b40d15a53781f2e785f54f2b4c3ef70",
        "2c32ac9a2f9b6da2673a462598ec07cf9034fbc56e9d21a1574889f866e77490",
        "33e7353025ff716fdfaa7db48344109544cf06eea0691516bb16f26d4d28baef",
        "6a5914f47248960346cec2a4c48c46cbb2dc011497c4fa392f8d9cb491128afb",
        "4fdfbabaeab3696249299d58631b2e646b30d0009eb08f4cdc262ab554d75c00",
        "2541e01760b221e5d3bdf546ec4f5b13f025c7b7ee34604bd6e00f201d8c8f53",
        "09a48972b178cfecc0bda16655938b2beaa58e63044353dbac2a3b83f26d137b",
        "1cb0db1a8f30b1f12b45c68bba1af3baf0e652c4ce5ff851c987314766a86332",
        "7f0b02e20d1f1f4dcd029d4885cc4756469f4a3e3a34e5dad5ea3bac83133d6f",
        "1f1893e419b315d7ea7c833441fda963bab3e9b83f1702f3ab7b90d9ccf339c2",
        "f3537206f8fe027a2975f66a94d6f6a12c28937f0f55b583f5cef12e97bd2a43",
        "5af616a7eee45972c196027cb0e26176a0717cb850d5ac1abae86a2fc9bbdf45",
        "1b57abdb784b962909a98120a46b58205ad86187086218731ce0e01f49835113",
        "346ddb72ff19a00b4379e717fc54429dd2a34c792cda78499910faea6bdf01ef",
        "c1b30d810b12ad36379132392c2fadfe25b6b2030e9c89071e8813070e5d6e6b",
        "53e6583fab88e14d765820392f2251c18cba997d19e91aeac5035626f8d9414e",
        "80f996e01bbb879c5a1f20da7d2b16fddb206aaefaefed245a601734e2e4a425",
        "142f14ccf2c5f0a724e2c66d5b9f14f1d07ad0f7ee635f541f6d6dd18cc63d4f",
        "4c3e1cf9c352d11c1e410c7dc9d37baab065da27b1e2e2e01ef50f08da4a0ddf",
        "d9b37dbad26f7af1678b137afd3e3c68a7aa7e94a7c15c75383f1fd156e5cd0d",
        "241671b211cfb349e1d9e6b650bd320b9569f02787f7b41fec94981f8b942822",
        "e54a79ac8be765c3d7772d7f933acb8722224128b879066f6e007f6618f6c24e",
        "ed669711efd056702b6241c30dbab87a06360f85a084077f39a422898f329386",
        "117fffda5f8bd6057f81dbec9d2d8500b393268635569037ca483e9ae75b4cb9",
        "5e36101f9d3903c2682db5e667efc408fe6c693b9e46bbecd3f013a2698c3e30",
        "79748bacba8a4b14538b148ffe4e188a6ae207696e7daa3ab6ba93aecc719728",
        "4a775b30a56d7137a7024c22d8905f1b30fe9a17b1a75a896d1218f80d494485",
        "c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
      ],
      "logIndex": 2567623813,
      "rootHash": "7a6d43ea58ed72683157408d56a693ea522e70e02fe56e54799ead78b02cecb3",
      "treeSize": 2581981201
    },
    "signedEntryTimestamp": "MEUCIE25I33GlgEwVkC0QzlyneY/XkQ9mciVFwGGZch6HzlLAiEA1LQwOFOYn8ha3SIeYmJ6i3kfik5wyD3KYAWnfyDjn8M="
  }
}