tarfs: keep mode bits and ownership from tar headers - #2455
Open
smoser wants to merge 2 commits into
Open
Chainguard Guardener / Enforce - Commit Signing
succeeded
Sep 3, 2026 in 3s
Successfully verified commit signature.
| CLAIM | DESCRIPTION | |
|---|---|---|
| ✅ | Found Git signature | |
| ✅ | Validated Git signature | |
| ✅ | Validated Rekor entry | |
| ✅ | Allowed by policy |
Details
Certificate
Details
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262062417595929328466099348708402949426094680420 (0x2de749049dfb46669caa04789c41851361e22964)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Sep 2 19:19:22 2026 UTC
Not After : Sep 2 19:29:22 2026 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
50:9b:14:60:53:b0:4f:19:de:ed:98:9c:b8:a9:90:
3e:ec:1a:68:69:41:2e:e9:55:f8:df:bf:f5:81:d7:
ea:dd
Y:
11:72:3b:0e:e9:77:ea:c9:49:6c:ff:97:5d:a1:74:
7e:a0:69:15:eb:a1:d9:99:2a:27:de:e7:3f:fa:57:
2e:d3
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
DE:EB:D8:93:5C:4B:CF:A0:F9:DD:83:F3:A5:7F:24:CA:0B:08:9E:87
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:scott-moser-work-v2@chainguard-workstations.iam.gserviceaccount.com
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Unknown extension 1.3.6.1.4.1.57264.1.24
Signed Certificate Timestamp:
BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoGOPxz8AAAQDAEYwRAIgN0wVCD24FsDYBGmRCZVVLNrt9K4i3W75J35Yq7Arh4gCIBvL+jOxfUYjn13wozdM1idgh7U4xlfg8f0geVMFbHeG
Signature Algorithm: ECDSA-SHA384
30:66:02:31:00:a2:f1:44:a9:8b:af:b5:4d:1e:ce:1c:6d:40:
b7:5b:ef:aa:55:05:1e:8b:f3:86:78:a8:af:73:30:84:b3:c8:
cd:51:ec:84:2b:f9:1b:9c:9c:d1:4f:39:e1:61:a7:8c:e9:02:
31:00:86:d5:4f:42:2a:c1:8e:1b:1c:7d:05:0d:8c:11:7d:f5:
dc:29:5d:41:f4:07:61:f6:da:bd:05:bc:c1:68:46:39:aa:62:
f8:c7:a8:c0:d3:0c:69:a6:23:ab:fe:c9:f6:7a
Rekor Entry
Details
{
"body": "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",
"integratedTime": 1788376762,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 2689528075,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2581981201\nem1D6ljtcmgxV0CNVqaT6lIucOAv5W5UeZ6teLAs7LM=\n\n— rekor.sigstore.dev wNI9ajBFAiEAsi5v50/Z7qeUQ+8s4dBmf4tG9va1/e1wVr3zk7OTeqYCICPFgtIwNQpJ7bmSpXKbboTLFySTcpDCApp6FC5o1NAr\n",
"hashes": [
"c00034d0690dcc8ae8b32292e2b2be223b40d15a53781f2e785f54f2b4c3ef70",
"2c32ac9a2f9b6da2673a462598ec07cf9034fbc56e9d21a1574889f866e77490",
"33e7353025ff716fdfaa7db48344109544cf06eea0691516bb16f26d4d28baef",
"6a5914f47248960346cec2a4c48c46cbb2dc011497c4fa392f8d9cb491128afb",
"4fdfbabaeab3696249299d58631b2e646b30d0009eb08f4cdc262ab554d75c00",
"2541e01760b221e5d3bdf546ec4f5b13f025c7b7ee34604bd6e00f201d8c8f53",
"09a48972b178cfecc0bda16655938b2beaa58e63044353dbac2a3b83f26d137b",
"1cb0db1a8f30b1f12b45c68bba1af3baf0e652c4ce5ff851c987314766a86332",
"7f0b02e20d1f1f4dcd029d4885cc4756469f4a3e3a34e5dad5ea3bac83133d6f",
"1f1893e419b315d7ea7c833441fda963bab3e9b83f1702f3ab7b90d9ccf339c2",
"f3537206f8fe027a2975f66a94d6f6a12c28937f0f55b583f5cef12e97bd2a43",
"5af616a7eee45972c196027cb0e26176a0717cb850d5ac1abae86a2fc9bbdf45",
"1b57abdb784b962909a98120a46b58205ad86187086218731ce0e01f49835113",
"346ddb72ff19a00b4379e717fc54429dd2a34c792cda78499910faea6bdf01ef",
"c1b30d810b12ad36379132392c2fadfe25b6b2030e9c89071e8813070e5d6e6b",
"53e6583fab88e14d765820392f2251c18cba997d19e91aeac5035626f8d9414e",
"80f996e01bbb879c5a1f20da7d2b16fddb206aaefaefed245a601734e2e4a425",
"142f14ccf2c5f0a724e2c66d5b9f14f1d07ad0f7ee635f541f6d6dd18cc63d4f",
"4c3e1cf9c352d11c1e410c7dc9d37baab065da27b1e2e2e01ef50f08da4a0ddf",
"d9b37dbad26f7af1678b137afd3e3c68a7aa7e94a7c15c75383f1fd156e5cd0d",
"241671b211cfb349e1d9e6b650bd320b9569f02787f7b41fec94981f8b942822",
"e54a79ac8be765c3d7772d7f933acb8722224128b879066f6e007f6618f6c24e",
"ed669711efd056702b6241c30dbab87a06360f85a084077f39a422898f329386",
"117fffda5f8bd6057f81dbec9d2d8500b393268635569037ca483e9ae75b4cb9",
"5e36101f9d3903c2682db5e667efc408fe6c693b9e46bbecd3f013a2698c3e30",
"79748bacba8a4b14538b148ffe4e188a6ae207696e7daa3ab6ba93aecc719728",
"4a775b30a56d7137a7024c22d8905f1b30fe9a17b1a75a896d1218f80d494485",
"c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
],
"logIndex": 2567623813,
"rootHash": "7a6d43ea58ed72683157408d56a693ea522e70e02fe56e54799ead78b02cecb3",
"treeSize": 2581981201
},
"signedEntryTimestamp": "MEUCIE25I33GlgEwVkC0QzlyneY/XkQ9mciVFwGGZch6HzlLAiEA1LQwOFOYn8ha3SIeYmJ6i3kfik5wyD3KYAWnfyDjn8M="
}
}
Loading