|
251587
|
Upload identity evidence
|
37504
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521531
|
1793521532
|
Edit
Delete
|
|
251588
|
Candidate tag (real run attempt, computed per job)
|
37505
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251589
|
Run https://github.com/actions/checkout@v4
|
37505
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251590
|
Enable pnpm
|
37505
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251591
|
Run https://github.com/actions/setup-node@v4
|
37505
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251592
|
Private registry auth (temporary userconfig)
|
37505
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251593
|
Install locked governance tools
|
37505
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251594
|
Resolve npmrc for BuildKit secret (never printed)
|
37505
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251595
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
37505
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251596
|
Install syft (pinned) and generate SPDX SBOM
|
37505
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251597
|
Install cosign (pinned)
|
37505
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251598
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
37505
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251599
|
Upload image evidence
|
37505
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793521533
|
1793521534
|
Edit
Delete
|
|
251601
|
Run https://github.com/actions/checkout@v4
|
37506
|
1
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251602
|
Enable pnpm
|
37506
|
2
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251603
|
Run https://github.com/actions/setup-node@v4
|
37506
|
3
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251604
|
Download static evidence
|
37506
|
4
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251605
|
Download runtime evidence
|
37506
|
5
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251606
|
Download identity evidence
|
37506
|
6
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251607
|
Download port-conformance evidence
|
37506
|
7
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251608
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
37506
|
8
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251609
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
37506
|
9
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251610
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
37506
|
10
|
116
|
4
|
71
|
0
|
1793521544
|
1793521544
|
1793521535
|
1793521544
|
Edit
Delete
|
|
251614
|
Candidate tag (real run attempt, computed per job)
|
37508
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251615
|
Run https://github.com/actions/checkout@v4
|
37508
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251616
|
Enable pnpm
|
37508
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251617
|
Run https://github.com/actions/setup-node@v4
|
37508
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251618
|
Private registry auth (temporary userconfig)
|
37508
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251619
|
Install locked governance tools
|
37508
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251620
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
37508
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251621
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
37508
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251622
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
37508
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251623
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
37508
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251624
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
37508
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251625
|
Upload package tarballs
|
37508
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251626
|
Upload public static evidence
|
37508
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522041
|
1793522132
|
Edit
Delete
|
|
251628
|
Run https://github.com/actions/checkout@v4
|
37509
|
1
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251629
|
Enable pnpm
|
37509
|
2
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251630
|
Run https://github.com/actions/setup-node@v4
|
37509
|
3
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251631
|
Private registry auth (temporary userconfig)
|
37509
|
4
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251632
|
Install locked governance tools
|
37509
|
5
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251633
|
Install runtime workspace (frozen lockfile)
|
37509
|
6
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251634
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
37509
|
7
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251635
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
37509
|
8
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251636
|
Generate Prisma clients
|
37509
|
9
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251637
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
37509
|
10
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251638
|
Repo-root governance gate
|
37509
|
11
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251639
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
37509
|
12
|
116
|
4
|
23
|
0
|
1793522134
|
1793522134
|
1793522132
|
1793522135
|
Edit
Delete
|
|
251642
|
Run https://github.com/actions/checkout@v4
|
37511
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522137
|
1793522137
|
Edit
Delete
|
|
251643
|
Enable pnpm
|
37511
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522137
|
1793522137
|
Edit
Delete
|