|
268372
|
Enable pnpm
|
38899
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268373
|
Run https://github.com/actions/setup-node@v4
|
38899
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268374
|
Private registry auth (temporary userconfig)
|
38899
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268375
|
Install locked governance tools
|
38899
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268376
|
Resolve npmrc for BuildKit secret (never printed)
|
38899
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268377
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38899
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268378
|
Install syft (pinned) and generate SPDX SBOM
|
38899
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268379
|
Install cosign (pinned)
|
38899
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268380
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38899
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268381
|
Upload image evidence
|
38899
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794115275
|
1794115276
|
Edit
Delete
|
|
268382
|
Candidate tag (real run attempt, computed per job)
|
38900
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268383
|
Run https://github.com/actions/checkout@v4
|
38900
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268384
|
Enable pnpm
|
38900
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268385
|
Run https://github.com/actions/setup-node@v4
|
38900
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268386
|
Download static evidence
|
38900
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268387
|
Download runtime evidence
|
38900
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268388
|
Download identity evidence
|
38900
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268389
|
Download port-conformance evidence
|
38900
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268390
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38900
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268391
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38900
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268392
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38900
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268393
|
Upload candidate evidence
|
38900
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268394
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38900
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1794115277
|
1794115696
|
Edit
Delete
|
|
268395
|
Checkout
|
38901
|
0
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268396
|
Setup Node.js
|
38901
|
1
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268397
|
Enable pnpm
|
38901
|
2
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268398
|
Configure read-only platform package authenticatio Configure read-only platform package authentication...
|
38901
|
3
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268399
|
Install dependencies
|
38901
|
4
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268400
|
Rebuild approved dependency scripts
|
38901
|
5
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268401
|
Audit production dependencies
|
38901
|
6
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268402
|
Generate Prisma clients
|
38901
|
7
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268403
|
Run static governance gate
|
38901
|
8
|
76
|
3
|
0
|
0
|
0
|
0
|
1794116156
|
1794116576
|
Edit
Delete
|
|
268408
|
Install (frozen lockfile)
|
38902
|
4
|
76
|
4
|
122
|
0
|
1794116584
|
1794116584
|
1794116577
|
1794116586
|
Edit
Delete
|
|
268409
|
check:pins(必需检查)
|
38902
|
5
|
76
|
4
|
122
|
0
|
1794116584
|
1794116584
|
1794116577
|
1794116586
|
Edit
Delete
|
|
268410
|
check:fixtures(必需检查)
|
38902
|
6
|
76
|
4
|
122
|
0
|
1794116584
|
1794116584
|
1794116577
|
1794116586
|
Edit
Delete
|
|
268416
|
Run https://github.com/actions/checkout@v4
|
38905
|
1
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268417
|
Enable pnpm
|
38905
|
2
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268418
|
Run https://github.com/actions/setup-node@v4
|
38905
|
3
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268419
|
Private registry auth (temporary userconfig)
|
38905
|
4
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268420
|
Install locked governance tools
|
38905
|
5
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268421
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38905
|
6
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268422
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38905
|
7
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268423
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38905
|
8
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268424
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38905
|
9
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268425
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38905
|
10
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268426
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38905
|
11
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268427
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38905
|
12
|
116
|
4
|
26
|
0
|
1794117596
|
1794117596
|
1794117592
|
1794117597
|
Edit
Delete
|
|
268431
|
Run https://github.com/actions/checkout@v4
|
38906
|
1
|
116
|
4
|
23
|
0
|
1794117600
|
1794117600
|
1794117597
|
1794117600
|
Edit
Delete
|
|
268432
|
Enable pnpm
|
38906
|
2
|
116
|
4
|
23
|
0
|
1794117600
|
1794117600
|
1794117597
|
1794117600
|
Edit
Delete
|
|
268433
|
Run https://github.com/actions/setup-node@v4
|
38906
|
3
|
116
|
4
|
23
|
0
|
1794117600
|
1794117600
|
1794117597
|
1794117600
|
Edit
Delete
|