Pxoraboard deploy signing
This page is separate from Pxoraboard on purpose. Its passkey signs ONLY what is shown below, and the servers trust only signatures made here.
Loading…
Check the environment, the action and the release against what you meant to approve. Compare the commit and the full release digest with GitHub (the master commit and its CI run's artifact digest), not with Backroom: if Backroom were compromised, it would show you whatever it wants. If anything differs, do NOT sign: close this page and halt execution in Backroom.
The Sign button becomes active a few seconds after the details appear.
Enrol a signing passkey
Creates a passkey for this signing site only. Nothing is sent to any server: give the key entry below to the server's root operator, who pins it on the hosts. Write down the fingerprint somewhere outside this site.