|
272627
|
Upload static evidence
|
39219
|
14
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272626
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
39219
|
13
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272625
|
Repo-root governance gate
|
39219
|
12
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272624
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
39219
|
11
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272623
|
Generate Prisma clients
|
39219
|
10
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272622
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39219
|
9
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272621
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39219
|
8
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272620
|
Install runtime workspace (frozen lockfile)
|
39219
|
7
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272619
|
Install locked governance tools
|
39219
|
6
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272618
|
Private registry auth (temporary userconfig)
|
39219
|
5
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272617
|
Run ./.git/ci-actions/setup-node
|
39219
|
4
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272616
|
Enable pnpm
|
39219
|
3
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272615
|
Run ./.git/ci-actions/checkout
|
39219
|
2
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272614
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39219
|
1
|
116
|
4
|
12
|
0
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272613
|
Candidate tag (real run attempt, computed per job)
|
39219
|
0
|
116
|
2
|
9
|
3
|
1794230819
|
1794230819
|
1794230819
|
1794230819
|
Edit
Delete
|
|
272612
|
Upload public static evidence
|
39218
|
16
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272611
|
Upload package tarballs
|
39218
|
15
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272610
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39218
|
14
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272609
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39218
|
13
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272608
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
39218
|
12
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272607
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
39218
|
11
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272606
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39218
|
10
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272605
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39218
|
9
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272604
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39218
|
8
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272603
|
Test bounded Action preparation (synthetic credent Test bounded Action preparation (synthetic credentials only)...
|
39218
|
7
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272602
|
Install locked governance tools
|
39218
|
6
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272601
|
Private registry auth (temporary userconfig)
|
39218
|
5
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272600
|
Run ./.git/ci-actions/setup-node
|
39218
|
4
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272599
|
Enable pnpm
|
39218
|
3
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272598
|
Run ./.git/ci-actions/checkout
|
39218
|
2
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272597
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39218
|
1
|
116
|
4
|
12
|
0
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272596
|
Candidate tag (real run attempt, computed per job)
|
39218
|
0
|
116
|
2
|
9
|
3
|
1794230817
|
1794230817
|
1794230817
|
1794230817
|
Edit
Delete
|
|
272595
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
39217
|
13
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272594
|
Upload candidate evidence
|
39217
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272593
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39217
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272592
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39217
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272591
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39217
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272590
|
Download port-conformance evidence
|
39217
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272589
|
Download identity evidence
|
39217
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272588
|
Download runtime evidence
|
39217
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272587
|
Download static evidence
|
39217
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272586
|
Run ./.git/ci-actions/setup-node
|
39217
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272585
|
Enable pnpm
|
39217
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272584
|
Run ./.git/ci-actions/checkout
|
39217
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272583
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39217
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272582
|
Candidate tag (real run attempt, computed per job)
|
39217
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230565
|
1794230565
|
Edit
Delete
|
|
272581
|
Upload image evidence
|
39216
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230562
|
1794230562
|
Edit
Delete
|
|
272580
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39216
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230562
|
1794230562
|
Edit
Delete
|
|
272579
|
Install cosign (pinned)
|
39216
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230562
|
1794230562
|
Edit
Delete
|
|
272578
|
Install syft (pinned) and generate SPDX SBOM
|
39216
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794230562
|
1794230562
|
Edit
Delete
|