|
156440
|
Install syft (pinned) and generate SPDX SBOM
|
28610
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698226
|
1789698226
|
Edit
Delete
|
|
156441
|
Install cosign (pinned)
|
28610
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698226
|
1789698226
|
Edit
Delete
|
|
156442
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
28610
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698226
|
1789698226
|
Edit
Delete
|
|
156443
|
Upload image evidence
|
28610
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698226
|
1789698226
|
Edit
Delete
|
|
156444
|
Run actions/checkout@v4
|
28611
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156445
|
Enable pnpm
|
28611
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156446
|
Run actions/setup-node@v4
|
28611
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156447
|
Download static evidence
|
28611
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156448
|
Download runtime evidence
|
28611
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156449
|
Download identity evidence
|
28611
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156450
|
Download port-conformance evidence
|
28611
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156451
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
28611
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156452
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
28611
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156453
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
28611
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156454
|
Upload candidate evidence
|
28611
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156455
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
28611
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698228
|
1789698258
|
Edit
Delete
|
|
156456
|
Run actions/checkout@v4
|
28612
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156457
|
Enable pnpm
|
28612
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156458
|
Run actions/setup-node@v4
|
28612
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156459
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
28612
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156460
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
28612
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156461
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
28612
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156462
|
Upload package tarballs
|
28612
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156463
|
Upload public static evidence
|
28612
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1789698260
|
1789698291
|
Edit
Delete
|
|
156468
|
Install runtime workspace (frozen lockfile)
|
28613
|
4
|
116
|
4
|
155
|
0
|
1789698300
|
1789698300
|
1789698291
|
1789698302
|
Edit
Delete
|
|
156469
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
28613
|
5
|
116
|
4
|
155
|
0
|
1789698300
|
1789698300
|
1789698291
|
1789698302
|
Edit
Delete
|
|
156470
|
Generate Prisma clients
|
28613
|
6
|
116
|
4
|
155
|
0
|
1789698300
|
1789698300
|
1789698291
|
1789698302
|
Edit
Delete
|
|
156471
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
28613
|
7
|
116
|
4
|
155
|
0
|
1789698300
|
1789698300
|
1789698291
|
1789698302
|
Edit
Delete
|
|
156472
|
Repo-root governance gate
|
28613
|
8
|
116
|
4
|
155
|
0
|
1789698300
|
1789698300
|
1789698291
|
1789698302
|
Edit
Delete
|
|
156473
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
28613
|
9
|
116
|
4
|
155
|
0
|
1789698300
|
1789698300
|
1789698291
|
1789698302
|
Edit
Delete
|
|
156475
|
Run actions/checkout@v4
|
28614
|
0
|
117
|
3
|
0
|
0
|
0
|
0
|
1789698302
|
1789698356
|
Edit
Delete
|
|
156476
|
Enable pnpm
|
28614
|
1
|
117
|
3
|
0
|
0
|
0
|
0
|
1789698302
|
1789698356
|
Edit
Delete
|
|
156477
|
Run actions/setup-node@v4
|
28614
|
2
|
117
|
3
|
0
|
0
|
0
|
0
|
1789698302
|
1789698356
|
Edit
Delete
|
|
156478
|
Governance tests
|
28614
|
3
|
117
|
3
|
0
|
0
|
0
|
0
|
1789698302
|
1789698356
|
Edit
Delete
|
|
156479
|
Governance gates (all gates run to completion; not Governance gates (all gates run to completion; not blocking yet)...
|
28614
|
4
|
117
|
3
|
0
|
0
|
0
|
0
|
1789698302
|
1789698356
|
Edit
Delete
|
|
156480
|
Tracked-secrets gate (root scope; the only gate wh Tracked-secrets gate (root scope; the only gate whose CI result is meaningful without nested repos)...
|
28614
|
5
|
117
|
3
|
0
|
0
|
0
|
0
|
1789698302
|
1789698356
|
Edit
Delete
|
|
156481
|
Run actions/checkout@v4
|
28615
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156482
|
Enable pnpm
|
28615
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156483
|
Run actions/setup-node@v4
|
28615
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156484
|
Private registry auth (temporary userconfig)
|
28615
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156485
|
Install runtime workspace (frozen lockfile)
|
28615
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156486
|
Generate clients for authority module unit imports Generate clients for authority module unit imports (no database)...
|
28615
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156487
|
Module / package unit tests
|
28615
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156488
|
Governance package tests
|
28615
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698356
|
1789698356
|
Edit
Delete
|
|
156489
|
Run actions/checkout@v4
|
28616
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698358
|
1789698358
|
Edit
Delete
|
|
156490
|
Enable pnpm
|
28616
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698358
|
1789698358
|
Edit
Delete
|
|
156491
|
Run actions/setup-node@v4
|
28616
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698358
|
1789698358
|
Edit
Delete
|
|
156492
|
Private registry auth (temporary userconfig)
|
28616
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698358
|
1789698358
|
Edit
Delete
|
|
156493
|
Install runtime workspace (frozen lockfile)
|
28616
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698358
|
1789698358
|
Edit
Delete
|
|
156494
|
Run port conformance with complete suite coverage
|
28616
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789698358
|
1789698358
|
Edit
Delete
|