|
262566
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38466
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793872879
|
1793872879
|
Edit
Delete
|
|
262567
|
Install syft (pinned) and generate SPDX SBOM
|
38466
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793872879
|
1793872879
|
Edit
Delete
|
|
262568
|
Install cosign (pinned)
|
38466
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793872879
|
1793872879
|
Edit
Delete
|
|
262569
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38466
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793872879
|
1793872879
|
Edit
Delete
|
|
262570
|
Upload image evidence
|
38466
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793872879
|
1793872879
|
Edit
Delete
|
|
262572
|
Run https://github.com/actions/checkout@v4
|
38467
|
1
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262573
|
Enable pnpm
|
38467
|
2
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262574
|
Run https://github.com/actions/setup-node@v4
|
38467
|
3
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262575
|
Download static evidence
|
38467
|
4
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262576
|
Download runtime evidence
|
38467
|
5
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262577
|
Download identity evidence
|
38467
|
6
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262578
|
Download port-conformance evidence
|
38467
|
7
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262579
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38467
|
8
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262580
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38467
|
9
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262581
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38467
|
10
|
116
|
4
|
71
|
0
|
1793872890
|
1793872890
|
1793872881
|
1793872890
|
Edit
Delete
|
|
262588
|
Install dependencies
|
38468
|
4
|
76
|
4
|
119
|
0
|
1793873041
|
1793873041
|
1793873029
|
1793873042
|
Edit
Delete
|
|
262589
|
Rebuild approved dependency scripts
|
38468
|
5
|
76
|
4
|
119
|
0
|
1793873041
|
1793873041
|
1793873029
|
1793873042
|
Edit
Delete
|
|
262590
|
Audit production dependencies
|
38468
|
6
|
76
|
4
|
119
|
0
|
1793873041
|
1793873041
|
1793873029
|
1793873042
|
Edit
Delete
|
|
262591
|
Generate Prisma clients
|
38468
|
7
|
76
|
4
|
119
|
0
|
1793873041
|
1793873041
|
1793873029
|
1793873042
|
Edit
Delete
|
|
262592
|
Run static governance gate
|
38468
|
8
|
76
|
4
|
119
|
0
|
1793873041
|
1793873041
|
1793873029
|
1793873042
|
Edit
Delete
|
|
262597
|
Install (frozen lockfile)
|
38469
|
4
|
76
|
4
|
122
|
0
|
1793873051
|
1793873051
|
1793873042
|
1793873052
|
Edit
Delete
|
|
262598
|
check:pins(必需检查)
|
38469
|
5
|
76
|
4
|
122
|
0
|
1793873051
|
1793873051
|
1793873042
|
1793873052
|
Edit
Delete
|
|
262599
|
check:fixtures(必需检查)
|
38469
|
6
|
76
|
4
|
122
|
0
|
1793873051
|
1793873051
|
1793873042
|
1793873052
|
Edit
Delete
|
|
262605
|
Run https://github.com/actions/checkout@v4
|
38472
|
1
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262606
|
Enable pnpm
|
38472
|
2
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262607
|
Run https://github.com/actions/setup-node@v4
|
38472
|
3
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262608
|
Private registry auth (temporary userconfig)
|
38472
|
4
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262609
|
Install locked governance tools
|
38472
|
5
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262610
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38472
|
6
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262611
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38472
|
7
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262612
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38472
|
8
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262613
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38472
|
9
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262614
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38472
|
10
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262615
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38472
|
11
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262616
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38472
|
12
|
116
|
4
|
26
|
0
|
1793878373
|
1793878373
|
1793878369
|
1793878374
|
Edit
Delete
|
|
262620
|
Run https://github.com/actions/checkout@v4
|
38473
|
1
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262621
|
Enable pnpm
|
38473
|
2
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262622
|
Run https://github.com/actions/setup-node@v4
|
38473
|
3
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262623
|
Private registry auth (temporary userconfig)
|
38473
|
4
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262624
|
Install locked governance tools
|
38473
|
5
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262625
|
Install runtime workspace (frozen lockfile)
|
38473
|
6
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262626
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38473
|
7
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262627
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38473
|
8
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262628
|
Generate Prisma clients
|
38473
|
9
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262629
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38473
|
10
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262630
|
Repo-root governance gate
|
38473
|
11
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262631
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38473
|
12
|
116
|
4
|
23
|
0
|
1793878377
|
1793878377
|
1793878374
|
1793878377
|
Edit
Delete
|
|
262633
|
Run https://github.com/actions/checkout@v4
|
38474
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793878379
|
1793878380
|
Edit
Delete
|
|
262634
|
Enable pnpm
|
38474
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793878379
|
1793878380
|
Edit
Delete
|
|
262635
|
Run https://github.com/actions/setup-node@v4
|
38474
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793878379
|
1793878380
|
Edit
Delete
|