|
261303
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
38366
|
14
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854165
|
1793854165
|
Edit
Delete
|
|
261304
|
Upload identity evidence
|
38366
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854165
|
1793854165
|
Edit
Delete
|
|
261305
|
Candidate tag (real run attempt, computed per job)
|
38367
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261306
|
Run https://github.com/actions/checkout@v4
|
38367
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261307
|
Enable pnpm
|
38367
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261308
|
Run https://github.com/actions/setup-node@v4
|
38367
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261309
|
Private registry auth (temporary userconfig)
|
38367
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261310
|
Install locked governance tools
|
38367
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261311
|
Resolve npmrc for BuildKit secret (never printed)
|
38367
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261312
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38367
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261313
|
Install syft (pinned) and generate SPDX SBOM
|
38367
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261314
|
Install cosign (pinned)
|
38367
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261315
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38367
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261316
|
Upload image evidence
|
38367
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793854167
|
1793854168
|
Edit
Delete
|
|
261318
|
Run https://github.com/actions/checkout@v4
|
38368
|
1
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261319
|
Enable pnpm
|
38368
|
2
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261320
|
Run https://github.com/actions/setup-node@v4
|
38368
|
3
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261321
|
Download static evidence
|
38368
|
4
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261322
|
Download runtime evidence
|
38368
|
5
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261323
|
Download identity evidence
|
38368
|
6
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261324
|
Download port-conformance evidence
|
38368
|
7
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261325
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38368
|
8
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261326
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38368
|
9
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261327
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38368
|
10
|
116
|
4
|
71
|
0
|
1793854179
|
1793854179
|
1793854169
|
1793854179
|
Edit
Delete
|
|
261340
|
Install dependencies
|
38370
|
4
|
76
|
4
|
119
|
0
|
1793857755
|
1793857755
|
1793857743
|
1793857756
|
Edit
Delete
|
|
261341
|
Rebuild approved dependency scripts
|
38370
|
5
|
76
|
4
|
119
|
0
|
1793857755
|
1793857755
|
1793857743
|
1793857756
|
Edit
Delete
|
|
261342
|
Audit production dependencies
|
38370
|
6
|
76
|
4
|
119
|
0
|
1793857755
|
1793857755
|
1793857743
|
1793857756
|
Edit
Delete
|
|
261343
|
Generate Prisma clients
|
38370
|
7
|
76
|
4
|
119
|
0
|
1793857755
|
1793857755
|
1793857743
|
1793857756
|
Edit
Delete
|
|
261344
|
Run static governance gate
|
38370
|
8
|
76
|
4
|
119
|
0
|
1793857755
|
1793857755
|
1793857743
|
1793857756
|
Edit
Delete
|
|
261349
|
Install (frozen lockfile)
|
38371
|
4
|
76
|
4
|
122
|
0
|
1793857764
|
1793857764
|
1793857756
|
1793857766
|
Edit
Delete
|
|
261350
|
check:pins(必需检查)
|
38371
|
5
|
76
|
4
|
122
|
0
|
1793857764
|
1793857764
|
1793857756
|
1793857766
|
Edit
Delete
|
|
261351
|
check:fixtures(必需检查)
|
38371
|
6
|
76
|
4
|
122
|
0
|
1793857764
|
1793857764
|
1793857756
|
1793857766
|
Edit
Delete
|
|
261356
|
Run https://github.com/actions/checkout@v4
|
38373
|
1
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261357
|
Enable pnpm
|
38373
|
2
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261358
|
Run https://github.com/actions/setup-node@v4
|
38373
|
3
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261359
|
Private registry auth (temporary userconfig)
|
38373
|
4
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261360
|
Install locked governance tools
|
38373
|
5
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261361
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38373
|
6
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261362
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38373
|
7
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261363
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38373
|
8
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261364
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38373
|
9
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261365
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38373
|
10
|
116
|
4
|
26
|
0
|
1793857775
|
1793857775
|
1793857772
|
1793857776
|
Edit
Delete
|
|
261369
|
Run https://github.com/actions/checkout@v4
|
38374
|
1
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|
|
261370
|
Enable pnpm
|
38374
|
2
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|
|
261371
|
Run https://github.com/actions/setup-node@v4
|
38374
|
3
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|
|
261372
|
Private registry auth (temporary userconfig)
|
38374
|
4
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|
|
261373
|
Install locked governance tools
|
38374
|
5
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|
|
261374
|
Install runtime workspace (frozen lockfile)
|
38374
|
6
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|
|
261375
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38374
|
7
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|
|
261376
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38374
|
8
|
116
|
4
|
23
|
0
|
1793857779
|
1793857779
|
1793857776
|
1793857779
|
Edit
Delete
|