Skip to content

docs: update API v2 tutorial for GA and add v1-to-v2 migration guide - #3613

Open
matthewhelmke wants to merge 6 commits into
chainguard-dev:mainfrom
matthewhelmke:apiv2-docs-updates
Open

docs: update API v2 tutorial for GA and add v1-to-v2 migration guide#3613
matthewhelmke wants to merge 6 commits into
chainguard-dev:mainfrom
matthewhelmke:apiv2-docs-updates

docs: re-orient API v2 tutorial to repos; fix subgroup access guidance

3a59630
Select commit
Loading
Failed to load commit list.
Chainguard Guardener / Enforce - Commit Signing succeeded Aug 7, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
Found Git signature
Validated Git signature
Validated Rekor entry
Allowed by policy

Details

Certificate

Details
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547194720771537623970581285005603423808199518714 (0x5fd90f55aab3a696fbc478899babc1ddfad2e9fa)
    Signature Algorithm: ECDSA-SHA384
        Issuer: O=sigstore.dev,CN=sigstore-intermediate
        Validity
            Not Before: Aug 7 13:02:41 2026 UTC
            Not After : Aug 7 13:12:41 2026 UTC
        Subject:         Subject Public Key Info:
            Public Key Algorithm: ECDSA
                Public-Key: (256 bit)
                X:
                    ac:3b:25:53:e4:87:d1:63:19:89:91:3f:ab:51:76:
                    66:6b:9b:02:09:d9:6e:7a:ac:54:b1:a2:40:c7:eb:
                    e9:77
                Y:
                    41:90:4b:f2:de:49:96:47:de:b4:d5:81:29:17:75:
                    06:bc:41:68:a2:5d:f8:8f:49:ad:b8:0f:a8:08:79:
                    05:c9
                Curve: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Subject Key Identifier:
                57:52:51:AA:83:E7:F2:66:EC:71:5D:43:9A:D7:02:C9:32:28:5B:FF
            X509v3 Authority Key Identifier:
                keyid:DF:D3:E9:CF:56:24:11:96:F9:A8:D8:E9:28:55:A2:C6:2E:18:64:3F
            X509v3 Subject Alternative Name: critical
                email:matthew.helmke@chainguard.dev
            oidcIssuer:
                https://github.com/login/oauth
            Unknown extension 1.3.6.1.4.1.57264.1.8
            Unknown extension 1.3.6.1.4.1.57264.1.24
            Signed Certificate Timestamp:
                BHkAdwB1AN09MGrGxxEyYxkeHJlnNwKiSl643jyt/4eKcoAvKe6OAAABn9xRk2oAAAQDAEYwRAIgWdni9ptJgncfXHpeSeBgpGwaYqa05/zrvFbQR6h2kM4CIEKzFiqRuWtTUlVak+LAopValPATk1egXOhurHbb4H53

    Signature Algorithm: ECDSA-SHA384
         30:65:02:30:2c:21:78:cb:15:68:31:74:03:3a:72:89:51:00:
         f3:e0:4f:44:3e:d0:3e:23:78:a8:f8:a6:9e:68:94:6b:08:ea:
         17:6b:d8:9a:ae:be:57:fa:2c:21:64:6e:3d:78:b5:36:02:31:
         00:d6:57:d5:c1:17:5d:e3:3b:25:79:dd:11:35:16:16:73:fa:
         7b:85:c5:76:1b:13:34:9c:16:a1:46:bd:c5:60:dc:31:9a:05:
         fe:03:91:0c:13:c4:6b:1f:a6:63:50:9e:cb

Rekor Entry

Details
{
  "body": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiJkNzU3ZDlmZTQwZjU3YWVjZmY2OTFlYjg5MTU1OGUyZDI2MzE4OTA3NjQ1MDBjNTE0OGI4YzBmYzdhY2MxZGQ0In19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FVUNJRTBnMzRjekNXUnZZWk5XdkhkT0ZUcG9nMUFqQ2ZXdXltNElpaTB3N3Y0NkFpRUF6OEh5U0ZITEtEay9zVTJudG0ySmlZbW1takhsbDNOMnVjZjNESVBCMjB3PSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVUk1WRU5EUVhKUFowRjNTVUpCWjBsVldEbHJVRlpoY1hwd2NHSTNlRWhwU20wMmRrSXpabkpUTm1admQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDlFUVROTlZFMTNUV3BSZUZkb1kwNU5hbGwzVDBSQk0wMVVUWGhOYWxGNFYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZ5UkhOc1ZTdFRTREJYVFZwcFdrVXZjVEZHTWxwdGRXSkJaMjVhWW01eGMxWk1SMmtLVVUxbWNqWllaRUpyUlhaNU0ydHRWMUk1TmpBeFdVVndSak5WUjNaRlJtOXZiRE0wYWpCdGRIVkJLMjlEU0d0R2VXRlBRMEZrU1hkblowaFBUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZXTVVwU0NuRnZVRzQ0YldKelkxWXhSRzEwWTBONVZFbHZWeTg0ZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDB0M1dVUldVakJTUVZGSUwwSkRSWGRJTkVWa1lsZEdNR1JIYUd4a2VUVnZXbGQ0ZEdFeVZrRlpNbWhvWVZjMWJtUlhSbmxhUXpWcldsaFpkd3BNUVZsTFMzZFpRa0pCUjBSMmVrRkNRVkZSWldGSVVqQmpTRTAyVEhrNWJtRllVbTlrVjBsMVdUSTVkRXd5ZUhaYU1teDFUREk1YUdSWVVtOU5RelJIQ2tOcGMwZEJVVkZDWnpjNGQwRlJaMFZKUVhkbFlVaFNNR05JVFRaTWVUbHVZVmhTYjJSWFNYVlpNamwwVERKNGRsb3liSFZNTWpsb1pGaFNiMDFHUVVjS1EybHpSMEZSVVVKbk56aDNRVkpuUlZGbmVFRlJNbVJhVFdzMWNWRlliRTVTUmxaVVUyMHhiMDFIVWtsUmJuQlFZVlpXTlZWdGJGWmxWa3AwV2toQ2F3cFNNbWQ0VjFkck1XRnRTWGxOUjNoT1lURndlbGxxU210alIwcHdWbGhzVTJKVWJHOWFSbWhUWW5wRFFtbFJXVXRMZDFsQ1FrRklWMlZSU1VWQloxSTNDa0pJYTBGa2QwSXhRVTR3T1UxSGNrZDRlRVY1V1hoclpVaEtiRzVPZDB0cFUydzJORE5xZVhRdk5HVkxZMjlCZGt0bE5rOUJRVUZDYmpsNFVtc3liMEVLUVVGUlJFRkZXWGRTUVVsblYyUnVhVGx3ZEVwbmJtTm1XRWh3WlZObFFtZHdSM2RoV1hGaE1EVXZlbkoyUm1KUlVqWm9NbXROTkVOSlJVdDZSbWx4VWdwMVYzUlVWV3hXWVdzclRFRnZjRlpoYkZCQlZHc3haV2RZVDJoMWNraGlZalJJTlROTlFXOUhRME54UjFOTk5EbENRVTFFUVRKblFVMUhWVU5OUTNkb0NtVk5jMVpoUkVZd1FYcHdlV2xXUlVFNEswSlFVa1EzVVZCcFRqUnhVR2x0Ym0xcFZXRjNhbkZHTW5aWmJYRTJLMVl2YjNOSlYxSjFVRmhwTVU1blNYZ0tRVTVhV0RGalJWaFlaVTAzU2xodVpFVlVWVmRHYmxBMlpUUllSbVJvYzFST1NuZFhiMVZoT1hoWFJHTk5XbTlHTDJkUFVrUkNVRVZoZUN0dFdURkRaUXA1ZHowOUNpMHRMUzB0UlU1RUlFTkZVbFJKUmtsRFFWUkZMUzB0TFMwSyJ9fX19",
  "integratedTime": 1786107761,
  "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
  "logIndex": 2370085111,
  "verification": {
    "inclusionProof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n2248201532\nuhikOFYPPbRVcpRK9DhQwnF22Ik9VK3h/pMq1hTcW38=\n\n— rekor.sigstore.dev wNI9ajBFAiAFQI6wPqL+xruwweP6/53izT9J0Glfa5gBgM9699zxSAIhALDMY7IxA8cIDY4i/L4LMqdlEUZa7TAZ3CACtHqRoLW4\n",
      "hashes": [
        "1c561e73c5526bd2765f72b8c36cffa5e113cf387dd37fc3623c851a7cde3f1b",
        "2aa6c033d21e21c4aaab73fac3083990574292dd0dc445c73b2e4528b4acef6b",
        "6a0304bf1b97c43423cfb5000bea9ba7ea25127d8ce9e4ad3fb354f5ae7498ab",
        "060f682c34dd53a3d6f7822624e2875f40cf575a71f76fa4417458871647374c",
        "6c05aacc191ab462a2e07849225ecabbfa98eb18dd0fa81c02d574917498aeda",
        "a73a07036381a632bc0e1cd5d190040756aaf0701a3bfa5c608f7a7095b56971",
        "abc37509bd660fa1769126dc3d601d140d8a6193ea8df36628e58a9fddb44130",
        "d3ef57d46f87f7eecc32dd3057845150076ed527348021577f33fa6426aad867",
        "83cb56faf090a64e7ea73faa483d1a54d016620bb422760f75167fc7963a1bed",
        "981a4927be5a89a48b1b211b82f9d1604770872242380495fc058ff7c5520105",
        "29a3e5510dcca2a27a1157cfde66b45fd7ff75ab19718955f21b3acba0bcf5c1",
        "b5e9ae8730120a1a013e300f3317db6487bedf1d05202692b25ff8e9e16463b5",
        "ee008b6a354db7e71a05bcee246adad0193f36a898dc1a9f48466b1595062799",
        "f59e81c4aa3818dbb1ceeebeffc7dc2e22b601d159a8a7e96a53d637a29ea5f4",
        "e20812641931cc0c899008ba4ff334db46e71d34962948cf70b0dc62ef069b95",
        "e1c2bbfc0aa747e1d0fe4eaa138dd216be57788b15703f9d60b6565772886822",
        "20b3284126c86fcdd9462dcbb49f6d87df6ba8ff996b7500e77e2c6ba98460a8",
        "8b9665f0566b0f0c420efd9ed8334ed8cf09be947f735d4496f0994b9dffb5e0",
        "c47fc30ac78b1ebf5e2a8613f2ab0e4592bbcd5744198587b95b6c56b0fde706"
      ],
      "logIndex": 2248180849,
      "rootHash": "ba18a438560f3db45572944af43850c27176d8893d54ade1fe932ad614dc5b7f",
      "treeSize": 2248201532
    },
    "signedEntryTimestamp": "MEUCIAlRcwVzo9r2pKlP1YG/9VXQSdjRDJR7MZZINS5NEFOAAiEAjCrCUZ2lsbb00LwbSs3lY2RBoTzWc075DZcPTwfxhr0="
  }
}