Skip to content

Drop the viewer step for sandbox.user teammates - #4265

Merged
matthewhelmke merged 1 commit into
mainfrom
sandbox-user-without-viewer
Oct 20, 2026
Merged

matthewhelmke merged 1 commit into
mainfrom
sandbox-user-without-viewer

Drop the viewer step for sandbox.user teammates

5fe165a
Select commit
Loading
Failed to load commit list.
Chainguard / Enforce - Commit Signing succeeded Oct 20, 2026 in 3s

Successfully verified commit signature.

CLAIM DESCRIPTION
✅ Found Git signature
✅ Validated Git signature
✅ Validated Rekor entry
✅ Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30539444899824303845963232937048570398230243760 (0x5596fa2647991486c8f28001bf8f3f6ae20e9b0)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Oct 20 15:35:09 2026 UTC
            Not After : Oct 20 15:45:09 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    b7:79:9a:ad:bc:c3:d3:df:ee:43:26:2c:44:c4:5b:
                    d8:ef:52:c9:c4:33:7c:f8:3c:3e:ad:78:b0:c2:ff:
                    08:d3
                Y:
                    9f:c0:72:4f:70:4b:db:0b:cf:52:c8:bf:44:48:0b:
                    50:3e:d7:14:67:eb:1b:91:7c:e5:c0:e5:cd:6f:41:
                    ae:e3
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:matthew.helmke@chainguard.dev
            oidcIssuer:
                https://github.com/login/oauth
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABoVnzwtIAAAQDAEYwRAIgeILc7EV3NsJUBfG8JfLX8IHbHqz29llErV9MsKf3UUMCIH8CLfLXQeVwQ5TsBltA1zjdoH3RN6OVzSXd5GxAVEdD

    Signature Algorithm: ECDSA-SHA384
         30:64:02:30:51:91:9d:a8:11:84:e5:c7:ff:3b:b8:86:b5:ca:
         dc:c7:b8:5f:c4:24:26:2d:00:54:fb:26:d6:5c:91:29:f1:59:
         33:2e:66:12:34:aa:36:f4:af:bb:2a:25:72:61:27:fa:02:30:
         3a:d8:ce:c7:11:58:29:77:10:96:89:cf:24:20:26:07:31:cb:
         18:0d:f1:fd:13:d1:0c:96:1f:a2:4f:7b:6c:5e:3e:39:c9:2b:
         28:d3:f2:9b:0b:e8:7e:7f:75:60:4e:ee

Rekor Entry

Details
{
  "body": "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",
  "integratedTime": 1792510510,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 3339393217,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n3217498477\nS20fXtF3hxE+Cm/y61uR91vzFMllIZDkd74cF/q8Rf8=\n\n— rekor.sigstore.dev wNI9ajBFAiAdFtz+RIF0eC+lDXSnpGYPI5ZCMJJkNGdHNjOaTROiEAIhAITO3xQJoGGqHi0WDtOv8WmXdXM3H7pVYVhmh3XlIKL/\n",
      "hashes": [
        "93d3b45890e74ce8e596dc3bf405a5bd5c7a1bbf65fc8d764c29c47d11273c76",
        "e8602a4b450f860ec5d99c42b0d772d8d7c87a15f1cb047f5d1dc9a45e2ce9f4",
        "c5a397731ac0aa3a3fa113335a56eb1c81a4e8ce45cf63917063c6ffab8de502",
        "bfcad20c88471d1221d84ae103ec519eff3f97921f57dbfd0c6bbafd0a4c1ed6",
        "05f64e3678fad6d7ca3f926353fc13769af2971013b549e9d1ca1f55a9568ccc",
        "f17568b5335df0d85c6bf8200043cb612c284826eef733ea9972da5fc49dbe4c",
        "85cd480a5a2c8322c836f14969aa812c994a865de9f65b31aec4c6de86cba0bc",
        "6d397ec7422b7fdee402963d2c50331be8c774fda4653de6ec5cd5b3de1ab86d",
        "ff6e6cd8d61944247224312b582c5f88ae4c364a54af39d6e912bfa88cfce09d",
        "acb4c6392ed4e3597b91072a9419e9716148040bd9e1f72a05d4994ea0d31cbd",
        "0f79fbee5171715e456d7e1bfb42bf26deceb8481d0c5dedf08bc5f40555b17d",
        "a9d59d5a37c20b5f521689cee9d8e5781968d46ac51b14346c9519bae8c51a71",
        "c82ab2053cd75338b4cb526aef2db3228b860d9ac11422ded2d06fae7fbe03aa",
        "db2937778b1793fc01e413d70d0f3f78e0c9f50ffa1232e238c9bbce1ce24a26",
        "76933c2f822288e56c40c0664858d331f388c0dde5e59362622975150fafb67f",
        "ca4564b53df564e136af5841a9d218d3235e9e03ebe02aa6b853ad7aa43822b5",
        "3cc7ee4b2247d50812661b64551c584e6c46f9c65b3640df8aa31ca2b42d2b9d",
        "ba6e4da99511e09d365d47489dca52f84497ba6371f2dcb8a9e4e609b560096b",
        "24d25db9a5de1ecad45a70ee4370d55db1aa8dab84170e1797bc8aaca0f5fef9",
        "5eaa5e4bf0471ce13153de87be0e4bf9d1f0ab444f2431c298a4f1fe35c0839d",
        "e916fbb8e824dafe5829c1526c03cea4b9560083757220cf765a7827f094bb99",
        "1e8bd33c15b3a04aef520d6ee6c222df1d59a2767bc897a456c06b9a9a260880",
        "1be9e4ee6804e61e9d526bf6518ecd0c9ad8dd6beb658df5ada68ed40113b7ea",
        "aa54d6343cc44674c14157071d75d53e38943f44ac8a41b17dcc55960a95143a",
        "820f46340a4d91edfeccd865e2db16b6623270216b38c081de5cace97b9240d4",
        "36539c96576628f035b4c288b24a87030b900d81e9df5630a4af8e38cacc71c7",
        "ab1cc76a7033cf9ed20dd9897b407b6c92bbd8d4c805bc043060412af0ce44ec",
        "c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
      ],
      "logIndex": 3217488955,
      "rootHash": "4b6d1f5ed17787113e0a6ff2eb5b91f75bf314c9652190e477be1c17fabc45ff",
      "treeSize": 3217498477
    },
    "signedEntryTimestamp": "MEUCIFEhh9CzPisJfqa7jP5MKJ3I8fgZ2soiTf0dYrcA+mRyAiEA4D+u+bBIcpSUqUQNYr1H7HJYgsIxt8flLSDQHKPwzSs="
  }
}