|
267251
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38812
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794050531
|
1794050531
|
Edit
Delete
|
|
267252
|
Upload image evidence
|
38812
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794050531
|
1794050531
|
Edit
Delete
|
|
267253
|
Candidate tag (real run attempt, computed per job)
|
38813
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267254
|
Run https://github.com/actions/checkout@v4
|
38813
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267255
|
Enable pnpm
|
38813
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267256
|
Run https://github.com/actions/setup-node@v4
|
38813
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267257
|
Download static evidence
|
38813
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267258
|
Download runtime evidence
|
38813
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267259
|
Download identity evidence
|
38813
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267260
|
Download port-conformance evidence
|
38813
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267261
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38813
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267262
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38813
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267263
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38813
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267264
|
Upload candidate evidence
|
38813
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267265
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38813
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1794050533
|
1794050563
|
Edit
Delete
|
|
267266
|
Candidate tag (real run attempt, computed per job)
|
38814
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267267
|
Run https://github.com/actions/checkout@v4
|
38814
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267268
|
Enable pnpm
|
38814
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267269
|
Run https://github.com/actions/setup-node@v4
|
38814
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267270
|
Private registry auth (temporary userconfig)
|
38814
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267271
|
Install locked governance tools
|
38814
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267272
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38814
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267273
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38814
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267274
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38814
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267275
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38814
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267276
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38814
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267277
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38814
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267278
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38814
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267279
|
Upload package tarballs
|
38814
|
13
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267280
|
Upload public static evidence
|
38814
|
14
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053528
|
1794053618
|
Edit
Delete
|
|
267281
|
Candidate tag (real run attempt, computed per job)
|
38815
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267282
|
Run https://github.com/actions/checkout@v4
|
38815
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267283
|
Enable pnpm
|
38815
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267284
|
Run https://github.com/actions/setup-node@v4
|
38815
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267285
|
Private registry auth (temporary userconfig)
|
38815
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267286
|
Install locked governance tools
|
38815
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267287
|
Install runtime workspace (frozen lockfile)
|
38815
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267288
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38815
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267289
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38815
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267290
|
Generate Prisma clients
|
38815
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267291
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38815
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267292
|
Repo-root governance gate
|
38815
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267293
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38815
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267294
|
Upload static evidence
|
38815
|
13
|
116
|
3
|
0
|
0
|
0
|
0
|
1794053618
|
1794053709
|
Edit
Delete
|
|
267295
|
Run https://github.com/actions/checkout@v4
|
38816
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794053711
|
1794053711
|
Edit
Delete
|
|
267296
|
Enable pnpm
|
38816
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794053711
|
1794053711
|
Edit
Delete
|
|
267297
|
Run https://github.com/actions/setup-node@v4
|
38816
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794053711
|
1794053711
|
Edit
Delete
|
|
267298
|
Private registry auth (temporary userconfig)
|
38816
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794053711
|
1794053711
|
Edit
Delete
|
|
267299
|
Install locked governance tools
|
38816
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794053711
|
1794053711
|
Edit
Delete
|
|
267300
|
Install runtime workspace (frozen lockfile)
|
38816
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794053711
|
1794053711
|
Edit
Delete
|