Approve production OpenSecret EIF for the tested router release - #1049
Merged
Merged
Conversation
Source commit: e6a87b6 PCR0: 1d73b62ac52780efb61b9f889f53dbe9b45609bb0cc11d10fcb09339ad06dbfd43a9a49667aacab2ea3cebdf0e51ab10 EIF SHA-256: e7d603cc0797f7928697ae87da3dd3fd3f9fe5e684674eb73ed94e2822da00fe Signed by the OpenSecret EIF release workflow run 36598982376.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Approve the production EIF measurements for the DEV-tested backend at
e6a87b62e1844959402f9073f591d546d86897da. This changes only the production snapshot and signed history; existing approvals and DEV measurements remain intact.The protected signing workflow builds the same EIF and measurement bytes as build 36598210704. Artifact hashes and GitHub provenance were verified against the exact source. PCR signatures, snapshot membership and history preservation are checked with the native compatibility helper before merge.
PCR0:
1d73b62ac52780efb61b9f889f53dbe9b45609bb0cc11d10fcb09339ad06dbfd43a9a49667aacab2ea3cebdf0e51ab10EIF SHA-256:
e7d603cc0797f7928697ae87da3dd3fd3f9fe5e684674eb73ed94e2822da00feAfter approval publication, the deployment artifact will be rebuilt from approval-containing master and independently verified. This PR does not deploy the service.