|
253793
|
Install syft (pinned) and generate SPDX SBOM
|
37751
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793546621
|
1793546621
|
Edit
Delete
|
|
253794
|
Install cosign (pinned)
|
37751
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793546621
|
1793546621
|
Edit
Delete
|
|
253795
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
37751
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793546621
|
1793546621
|
Edit
Delete
|
|
253796
|
Upload image evidence
|
37751
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793546621
|
1793546621
|
Edit
Delete
|
|
253797
|
Candidate tag (real run attempt, computed per job)
|
37752
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253798
|
Run https://github.com/actions/checkout@v4
|
37752
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253799
|
Enable pnpm
|
37752
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253800
|
Run https://github.com/actions/setup-node@v4
|
37752
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253801
|
Download static evidence
|
37752
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253802
|
Download runtime evidence
|
37752
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253803
|
Download identity evidence
|
37752
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253804
|
Download port-conformance evidence
|
37752
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253805
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
37752
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253806
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
37752
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253807
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
37752
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253808
|
Upload candidate evidence
|
37752
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253809
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
37752
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793546623
|
1793547060
|
Edit
Delete
|
|
253821
|
Candidate tag (real run attempt, computed per job)
|
37764
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253822
|
Run https://github.com/actions/checkout@v4
|
37764
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253823
|
Enable pnpm
|
37764
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253824
|
Run https://github.com/actions/setup-node@v4
|
37764
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253825
|
Private registry auth (temporary userconfig)
|
37764
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253826
|
Install locked governance tools
|
37764
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253827
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
37764
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253828
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
37764
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253829
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
37764
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253830
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
37764
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253831
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
37764
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253832
|
Upload package tarballs
|
37764
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253833
|
Upload public static evidence
|
37764
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577290
|
1793577711
|
Edit
Delete
|
|
253834
|
Candidate tag (real run attempt, computed per job)
|
37765
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253835
|
Run https://github.com/actions/checkout@v4
|
37765
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253836
|
Enable pnpm
|
37765
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253837
|
Run https://github.com/actions/setup-node@v4
|
37765
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253838
|
Private registry auth (temporary userconfig)
|
37765
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253839
|
Install locked governance tools
|
37765
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253840
|
Install runtime workspace (frozen lockfile)
|
37765
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253841
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
37765
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253842
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
37765
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253843
|
Generate Prisma clients
|
37765
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253844
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
37765
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253845
|
Repo-root governance gate
|
37765
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253846
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
37765
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253847
|
Upload static evidence
|
37765
|
13
|
116
|
3
|
0
|
0
|
0
|
0
|
1793577711
|
1793577801
|
Edit
Delete
|
|
253850
|
Run https://github.com/actions/checkout@v4
|
37767
|
1
|
116
|
4
|
26
|
0
|
1793578071
|
1793578071
|
1793578063
|
1793578072
|
Edit
Delete
|
|
253851
|
Enable pnpm
|
37767
|
2
|
116
|
4
|
26
|
0
|
1793578071
|
1793578071
|
1793578063
|
1793578072
|
Edit
Delete
|
|
253852
|
Run https://github.com/actions/setup-node@v4
|
37767
|
3
|
116
|
4
|
26
|
0
|
1793578071
|
1793578071
|
1793578063
|
1793578072
|
Edit
Delete
|
|
253853
|
Private registry auth (temporary userconfig)
|
37767
|
4
|
116
|
4
|
26
|
0
|
1793578071
|
1793578071
|
1793578063
|
1793578072
|
Edit
Delete
|
|
253854
|
Install locked governance tools
|
37767
|
5
|
116
|
4
|
26
|
0
|
1793578071
|
1793578071
|
1793578063
|
1793578072
|
Edit
Delete
|
|
253855
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
37767
|
6
|
116
|
4
|
26
|
0
|
1793578071
|
1793578071
|
1793578063
|
1793578072
|
Edit
Delete
|