43304205109
84%

Ran 12 Nov 2026 09:10PM UTC

Jobs 1

Files 60

Run time 1min

Badge

Embed ▾

Committed 12 Nov 2026 08:50PM UTC coverage: 84.074% (-0.04%) from 84.114%

Build # 43304205109

Build Type

push

github

Committed by

web-flow

Commit Message

ci: install cosign v3.1.4 through cosign-installer v4.1.3 (#1012)

Releases, the chart signing path and vex-reattest.yaml installed cosign
v3.1.3 through cosign-installer v4.1.2, whose bootstrap cosign is
v3.0.6. Move the installer to v4.1.3 (bootstrap v3.1.4) and every
cosign-release pin, including the attest action's cosign-version
default, to v3.1.4 together.

TestCosignVersionPinsAgree checked the attest, verify and chart signing
actions but not vex-reattest.yaml, which installs cosign twice outside
them. It now requires those installs to match the attest action's pin
too, and fails if the workflow installs cosign nowhere.

cosign v3.1.4 verifies both the OpenVEX attestation vex-reattest.yaml
signed with v3.1.3 on agent v7.0.0 today and that release's index
signature, so verification reads what earlier releases wrote.

Fixes #1011

Signed-off-by: Brian Lockwood <lockwobr@gmail.com>

Coverage Stats

10442 of 12420 relevant lines covered (84.07%)

7.76 hits per line

Coverage Regressions

Lines	Coverage	∆	File
7	84.82	-0.19%	operator/internal/controller/nodewright_controller.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	43304205109.1	12 Nov 2026 09:10PM UTC	60	84.07	GitHub Action Run

NVIDIA / nodewright / 43304205109
84%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 43304205109

NVIDIA / nodewright / 43304205109 84%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 43304205109

NVIDIA / nodewright / 43304205109
84%

README BADGES
x