|
267877
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
38859
|
14
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103403
|
1794103404
|
Edit
Delete
|
|
267878
|
Upload identity evidence
|
38859
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103403
|
1794103404
|
Edit
Delete
|
|
267879
|
Candidate tag (real run attempt, computed per job)
|
38860
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267880
|
Run https://github.com/actions/checkout@v4
|
38860
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267881
|
Enable pnpm
|
38860
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267882
|
Run https://github.com/actions/setup-node@v4
|
38860
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267883
|
Private registry auth (temporary userconfig)
|
38860
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267884
|
Install locked governance tools
|
38860
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267885
|
Resolve npmrc for BuildKit secret (never printed)
|
38860
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267886
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38860
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267887
|
Install syft (pinned) and generate SPDX SBOM
|
38860
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267888
|
Install cosign (pinned)
|
38860
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267889
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38860
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267890
|
Upload image evidence
|
38860
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103405
|
1794103406
|
Edit
Delete
|
|
267892
|
Run https://github.com/actions/checkout@v4
|
38861
|
1
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267893
|
Enable pnpm
|
38861
|
2
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267894
|
Run https://github.com/actions/setup-node@v4
|
38861
|
3
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267895
|
Download static evidence
|
38861
|
4
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267896
|
Download runtime evidence
|
38861
|
5
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267897
|
Download identity evidence
|
38861
|
6
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267898
|
Download port-conformance evidence
|
38861
|
7
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267899
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38861
|
8
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267900
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38861
|
9
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267901
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38861
|
10
|
116
|
4
|
66
|
0
|
1794103413
|
1794103413
|
1794103407
|
1794103413
|
Edit
Delete
|
|
267905
|
Run https://github.com/actions/checkout@v4
|
38862
|
1
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267906
|
Enable pnpm
|
38862
|
2
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267907
|
Run https://github.com/actions/setup-node@v4
|
38862
|
3
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267908
|
Private registry auth (temporary userconfig)
|
38862
|
4
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267909
|
Install locked governance tools
|
38862
|
5
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267910
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38862
|
6
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267911
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38862
|
7
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267912
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38862
|
8
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267913
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38862
|
9
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267914
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38862
|
10
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267915
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38862
|
11
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267916
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38862
|
12
|
116
|
4
|
26
|
0
|
1794103593
|
1794103593
|
1794103589
|
1794103593
|
Edit
Delete
|
|
267920
|
Run https://github.com/actions/checkout@v4
|
38863
|
1
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267921
|
Enable pnpm
|
38863
|
2
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267922
|
Run https://github.com/actions/setup-node@v4
|
38863
|
3
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267923
|
Private registry auth (temporary userconfig)
|
38863
|
4
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267924
|
Install locked governance tools
|
38863
|
5
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267925
|
Install runtime workspace (frozen lockfile)
|
38863
|
6
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267926
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38863
|
7
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267927
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38863
|
8
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267928
|
Generate Prisma clients
|
38863
|
9
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267929
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38863
|
10
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267930
|
Repo-root governance gate
|
38863
|
11
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267931
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38863
|
12
|
116
|
4
|
23
|
0
|
1794103596
|
1794103596
|
1794103594
|
1794103597
|
Edit
Delete
|
|
267933
|
Run https://github.com/actions/checkout@v4
|
38864
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103599
|
1794103599
|
Edit
Delete
|
|
267934
|
Enable pnpm
|
38864
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103599
|
1794103599
|
Edit
Delete
|