Improve rules through Magnet Goblin analysis #47
Merged
Chainguard Enforce / Enforce - Commit Signing
succeeded
Mar 12, 2024 in 1s
Successfully verified commit signature.
CLAIM | DESCRIPTION | |
---|---|---|
✅ | Found Git signature | |
✅ | Validated Git signature | |
✅ | Validated Rekor entry | |
✅ | Allowed by policy |
Details
Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473731944741841201538272153546650490548822592385 (0x52fae0061ec721a0018667ea2679b2b31d39cb81)
Signature Algorithm: ECDSA-SHA384
Issuer: O=sigstore.dev,CN=sigstore-intermediate
Validity
Not Before: Mar 12 15:24:21 2024 UTC
Not After : Mar 12 15:34:21 2024 UTC
Subject: Subject Public Key Info:
Public Key Algorithm: ECDSA
Public-Key: (256 bit)
X:
05:86:a0:30:53:34:fe:7b:c8:75:ac:c1:d6:5c:1b:
2f:d8:b0:66:b0:a7:16:43:28:52:66:b0:00:c9:64:
84:4e
Y:
f2:c7:6d:89:0e:f8:23:79:00:59:a7:f2:e1:27:26:
de:4a:84:ce:30:98:7b:76:b4:1f:e2:3b:bc:8d:42:
90:83
Curve: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Subject Key Identifier:
EF:EC:95:4C:74:E5:FD:95:BD:1F:EC:8A:F5:23:E7:CA:78:CA:2F:66
X509v3 Authority Key Identifier:
keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
X509v3 Subject Alternative Name: critical
email:t@chainguard.dev
oidcIssuer:
https://accounts.google.com
Unknown extension 1.3.6.1.4.1.57264.1.8
Signed Certificate Timestamp:
BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABjjNDwIMAAAQDAEYwRAIgSFXlMZBgRN0M53Armq2Weuc+pr/xx/5Kh6nqWbzcaT4CIEjv7d3odK/IKbWcPw2FNg7QX9T7O0SitFuRqfmOxbXu
Signature Algorithm: ECDSA-SHA384
30:65:02:30:18:f0:c5:54:44:26:13:4a:7d:ed:c4:0c:05:5a:
41:e9:54:b4:29:7b:94:98:0b:f8:b0:25:da:4b:40:1e:da:60:
28:f1:e4:33:67:c5:f1:8f:70:fa:b2:41:c2:57:96:84:02:31:
00:90:34:07:8d:27:30:c7:85:51:89:aa:6f:a9:46:87:16:0f:
61:00:3f:20:9d:03:cf:79:ae:84:cd:9c:cc:9c:e0:4b:c5:79:
ab:9a:36:36:d5:22:ce:54:a5:a6:b6:ae:2c
Rekor Entry
{
"body": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiIyMmQ3NGQ2MjI0MWY2MjA3YjlhY2RhNTAxNmVkZDcxMmRhZDVhZTdkNTc1OTA4OTVkZTU5ZmQxODI4N2MzYmNmIn19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FUUNJQ3loZHpHOVEwZmRsQW5oTVM3TlNobEJ4MFFkQVdscGcvV1NYZmM3eTE4QUFpQmhSMHA2dURqMzAvL1E5VWpBazFCd1FOeWtLdnRNNTUvb21FUU5mUUhqUGc9PSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVTjVSRU5EUVdzMlowRjNTVUpCWjBsVlZYWnlaMEpvTjBoSllVRkNhRzFtY1VwdWJYbHplREExZVRSRmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFJkMDE2UlhsTlZGVjVUa1JKZUZkb1kwNU5hbEYzVFhwRmVVMVVWWHBPUkVsNFYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZDV1dGblRVWk5NQzl1ZGtsa1lYcENNV3gzWWt3NWFYZGFja051Um10TmIxVnRZWGNLUVUxc2EyaEZOM2w0TWpKS1JIWm5hbVZSUWxwd0wweG9TbmxpWlZOdlZFOU5TbWczWkhKUlpqUnFkVGhxVlV0Ulp6WlBRMEZYTUhkblowWndUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlUzSzNsV0NsUklWR3d2V2xjNVNDdDVTemxUVUc1NWJtcExUREpaZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDBobldVUldVakJTUVZGSUwwSkNVWGRGYjBWUlpFVkNhbUZIUm5CaWJXUXhXVmhLYTB4dFVteGtha0Z3UW1kdmNrSm5SVVZCV1U4dlRVRkZRZ3BDUW5SdlpFaFNkMk42YjNaTU1rWnFXVEk1TVdKdVVucE1iV1IyWWpKa2MxcFROV3BpTWpCM1MzZFpTMHQzV1VKQ1FVZEVkbnBCUWtOQlVXUkVRblJ2Q21SSVVuZGplbTkyVERKR2Fsa3lPVEZpYmxKNlRHMWtkbUl5WkhOYVV6VnFZakl3ZDJkWmEwZERhWE5IUVZGUlFqRnVhME5DUVVsRlpYZFNOVUZJWTBFS1pGRkVaRkJVUW5GNGMyTlNUVzFOV2tob2VWcGFlbU5EYjJ0d1pYVk9ORGh5Wml0SWFXNUxRVXg1Ym5WcVowRkJRVmswZWxFNFEwUkJRVUZGUVhkQ1J3cE5SVkZEU1VWb1ZqVlVSMUZaUlZSa1JFOWtkMHMxY1hSc2JuSnVVSEZoTHpoalppdFRiMlZ3Tm14dE9ETkhheXRCYVVKSk55c3paRFpJVTNaNVEyMHhDbTVFT0U1b1ZGbFBNRVl2VlN0NmRFVnZjbEppYTJGdU5XcHpWekUzYWtGTFFtZG5jV2hyYWs5UVVWRkVRWGRPYjBGRVFteEJha0ZaT0UxV1ZWSkRXVlFLVTI0emRIaEJkMFpYYTBod1ZreFJjR1UxVTFsREwybDNTbVJ3VEZGQ04yRlpRMnA0TlVST2JuaG1SMUJqVUhGNVVXTktXR3h2VVVOTlVVTlJUa0ZsVGdwS2VrUklhRlpIU25GdEszQlNiMk5YUkRKRlFWQjVRMlJCT0RrMWNtOVVUbTVOZVdNMFJYWkdaV0YxWVU1cVlsWkpjelZWY0dGaE1uSnBkejBLTFMwdExTMUZUa1FnUTBWU1ZFbEdTVU5CVkVVdExTMHRMUW89In19fX0=",
"integratedTime": 1710257062,
"logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
"logIndex": 77542139,
"verification": {
"inclusionProof": {
"checkpoint": "rekor.sigstore.dev - 2605736670972794746\n73378791\nphn2zbUpmcPFoGpbOwfYWVLaKjQm9IcZcHezLk8x7hY=\n\n— rekor.sigstore.dev wNI9ajBFAiBtH+T0VHeenw4krGFfudPa68EKxwCIQsfRFh97Iusr2gIhANRBdxGRTyIaNrXf12y+a4truRK9JNG6oil+miEvYuJe\n",
"hashes": [
"8225b7eec6d436964b8aa0eeef2f6fe47b11be44cc5cc2b727de92d74623e8a0",
"830ed26c391f2ef5302c1163a67b1e07b81ed1801a36afcd3be37da504cb7b66",
"b519e1ec7192a5c8f34378777b54cb38a51e81b05e446bb63ca19ea070b34ef2",
"65b01843a2b0f6f69fbe38e0a4060928505240069f9d4749387c221a2d4f9e30",
"2b444a0aedcf9eaa7cdad3c4888739b9dd52626a5db8fce7288df73f39ad49a7",
"819c9076aefe1dab88a2a86e66213d7c53fe5eeb20428fa58122599207278451",
"f85f5ce261b4f8a40f6e303fe305716c31db9716a7d3ede56ed867fbf1fad737",
"73278f51f6a4543702d71c98ec67ce907685e05a335606c0d0c2ac5d16a1dc8d",
"c825bb624b94bf0e19c06969fcaf5098b076d4a8df8cbd64f866c68fbc18b754",
"e73c5fd450410022a8b3b0dc5bd8236133dd49bf7c1f963c11ac94adb5a976d3",
"a68485d93d2f65e3e35825575b2e91b87f64538f9f7671a80e1eddb9bd25e131",
"97bd2f89abd25e48fa02f392a6441a852a1dc46f2b9590f2d03ab910bf592fe2",
"1f9ef77a649b990774a84ece056e2a03b0b7f5e36bacffc79edb80948f4a4a42",
"9982ac0f5cbc7484266a9a9a68e8459431e29090af30d2f6a01c94b97667d11f",
"9eaece324fda38254f2c39647354a18ae032f4473ef23c14cf70da3693659803",
"4b5d81cd6527596848007a5cb228113d2fd9e98ee73e875178ac5f96ac40b6a9",
"bed1c09797a2af2caa077b93729e972b02c94baf1170d6628edaaaef2943804c",
"8b7f12fbed9ba843cd1c942797a45b9ba6f62fb4b0ae8930e3ac864456c1400c",
"ed9d7c60b040bde8c45789c91c82a892cff19628e7851d34e6a4d6db0e10b478",
"f7c7a7ccc682fb1e6808cbc8650039cfcbeed9aa4330216f13ff77e4d7ee3f0f"
],
"logIndex": 73378708,
"rootHash": "a619f6cdb52999c3c5a06a5b3b07d85952da2a3426f487197077b32e4f31ee16",
"treeSize": 73378791
},
"signedEntryTimestamp": "MEYCIQDnGsacwymsKnil4VhsHycAkEaYw0garSm6Uem5xGlZXgIhAKEcQbrOhzgVQ+H5EHt0jMzSnoNU/mzcSix8eGMi8AD5"
}
}
Loading