|
266464
|
Install syft (pinned) and generate SPDX SBOM
|
38749
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794013454
|
1794013455
|
Edit
Delete
|
|
266465
|
Install cosign (pinned)
|
38749
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794013454
|
1794013455
|
Edit
Delete
|
|
266466
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38749
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794013454
|
1794013455
|
Edit
Delete
|
|
266467
|
Upload image evidence
|
38749
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794013454
|
1794013455
|
Edit
Delete
|
|
266469
|
Run https://github.com/actions/checkout@v4
|
38750
|
1
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266470
|
Enable pnpm
|
38750
|
2
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266471
|
Run https://github.com/actions/setup-node@v4
|
38750
|
3
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266472
|
Download static evidence
|
38750
|
4
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266473
|
Download runtime evidence
|
38750
|
5
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266474
|
Download identity evidence
|
38750
|
6
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266475
|
Download port-conformance evidence
|
38750
|
7
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266476
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38750
|
8
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266477
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38750
|
9
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266478
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38750
|
10
|
116
|
4
|
66
|
0
|
1794013461
|
1794013461
|
1794013456
|
1794013462
|
Edit
Delete
|
|
266491
|
Install dependencies
|
38752
|
4
|
76
|
4
|
119
|
0
|
1794025178
|
1794025178
|
1794025163
|
1794025179
|
Edit
Delete
|
|
266492
|
Rebuild approved dependency scripts
|
38752
|
5
|
76
|
4
|
119
|
0
|
1794025178
|
1794025178
|
1794025163
|
1794025179
|
Edit
Delete
|
|
266493
|
Audit production dependencies
|
38752
|
6
|
76
|
4
|
119
|
0
|
1794025178
|
1794025178
|
1794025163
|
1794025179
|
Edit
Delete
|
|
266494
|
Generate Prisma clients
|
38752
|
7
|
76
|
4
|
119
|
0
|
1794025178
|
1794025178
|
1794025163
|
1794025179
|
Edit
Delete
|
|
266495
|
Run static governance gate
|
38752
|
8
|
76
|
4
|
119
|
0
|
1794025178
|
1794025178
|
1794025163
|
1794025179
|
Edit
Delete
|
|
266500
|
Install (frozen lockfile)
|
38753
|
4
|
76
|
4
|
122
|
0
|
1794025189
|
1794025189
|
1794025179
|
1794025192
|
Edit
Delete
|
|
266501
|
check:pins(必需检查)
|
38753
|
5
|
76
|
4
|
122
|
0
|
1794025189
|
1794025189
|
1794025179
|
1794025192
|
Edit
Delete
|
|
266502
|
check:fixtures(必需检查)
|
38753
|
6
|
76
|
4
|
122
|
0
|
1794025189
|
1794025189
|
1794025179
|
1794025192
|
Edit
Delete
|
|
266508
|
Run https://github.com/actions/checkout@v4
|
38756
|
1
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266509
|
Enable pnpm
|
38756
|
2
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266510
|
Run https://github.com/actions/setup-node@v4
|
38756
|
3
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266511
|
Private registry auth (temporary userconfig)
|
38756
|
4
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266512
|
Install locked governance tools
|
38756
|
5
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266513
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38756
|
6
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266514
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38756
|
7
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266515
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38756
|
8
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266516
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38756
|
9
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266517
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38756
|
10
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266518
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38756
|
11
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266519
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38756
|
12
|
116
|
4
|
26
|
0
|
1794025247
|
1794025247
|
1794025243
|
1794025247
|
Edit
Delete
|
|
266523
|
Run https://github.com/actions/checkout@v4
|
38757
|
1
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266524
|
Enable pnpm
|
38757
|
2
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266525
|
Run https://github.com/actions/setup-node@v4
|
38757
|
3
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266526
|
Private registry auth (temporary userconfig)
|
38757
|
4
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266527
|
Install locked governance tools
|
38757
|
5
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266528
|
Install runtime workspace (frozen lockfile)
|
38757
|
6
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266529
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38757
|
7
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266530
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38757
|
8
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266531
|
Generate Prisma clients
|
38757
|
9
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266532
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38757
|
10
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266533
|
Repo-root governance gate
|
38757
|
11
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266534
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38757
|
12
|
116
|
4
|
23
|
0
|
1794025250
|
1794025250
|
1794025248
|
1794025251
|
Edit
Delete
|
|
266536
|
Run https://github.com/actions/checkout@v4
|
38758
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794025253
|
1794025253
|
Edit
Delete
|
|
266537
|
Enable pnpm
|
38758
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794025253
|
1794025253
|
Edit
Delete
|
|
266538
|
Run https://github.com/actions/setup-node@v4
|
38758
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794025253
|
1794025253
|
Edit
Delete
|
|
266539
|
Private registry auth (temporary userconfig)
|
38758
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794025253
|
1794025253
|
Edit
Delete
|