|
270070
|
Install cosign (pinned)
|
39028
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794192601
|
1794192601
|
Edit
Delete
|
|
270071
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39028
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794192601
|
1794192601
|
Edit
Delete
|
|
270072
|
Upload image evidence
|
39028
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794192601
|
1794192601
|
Edit
Delete
|
|
270074
|
Run https://github.com/actions/checkout@v4
|
39029
|
1
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270075
|
Enable pnpm
|
39029
|
2
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270076
|
Run https://github.com/actions/setup-node@v4
|
39029
|
3
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270077
|
Download static evidence
|
39029
|
4
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270078
|
Download runtime evidence
|
39029
|
5
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270079
|
Download identity evidence
|
39029
|
6
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270080
|
Download port-conformance evidence
|
39029
|
7
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270081
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39029
|
8
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270082
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39029
|
9
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270083
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39029
|
10
|
116
|
4
|
66
|
0
|
1794192608
|
1794192608
|
1794192603
|
1794192608
|
Edit
Delete
|
|
270086
|
Checkout repository
|
39030
|
0
|
13
|
3
|
0
|
0
|
0
|
0
|
1794193219
|
1794193262
|
Edit
Delete
|
|
270087
|
Setup Java
|
39030
|
1
|
13
|
3
|
0
|
0
|
0
|
0
|
1794193219
|
1794193262
|
Edit
Delete
|
|
270088
|
Initialize CodeQL
|
39030
|
2
|
13
|
3
|
0
|
0
|
0
|
0
|
1794193219
|
1794193262
|
Edit
Delete
|
|
270089
|
Grant Execute Permission
|
39030
|
3
|
13
|
3
|
0
|
0
|
0
|
0
|
1794193219
|
1794193262
|
Edit
Delete
|
|
270090
|
Build
|
39030
|
4
|
13
|
3
|
0
|
0
|
0
|
0
|
1794193219
|
1794193262
|
Edit
Delete
|
|
270091
|
Perform CodeQL Analysis
|
39030
|
5
|
13
|
3
|
0
|
0
|
0
|
0
|
1794193219
|
1794193262
|
Edit
Delete
|
|
270094
|
Run https://github.com/actions/checkout@v4
|
39032
|
1
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270095
|
Enable pnpm
|
39032
|
2
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270096
|
Run https://github.com/actions/setup-node@v4
|
39032
|
3
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270097
|
Private registry auth (temporary userconfig)
|
39032
|
4
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270098
|
Install locked governance tools
|
39032
|
5
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270099
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39032
|
6
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270100
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39032
|
7
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270101
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39032
|
8
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270102
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39032
|
9
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270103
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39032
|
10
|
116
|
4
|
29
|
0
|
1794196439
|
1794196439
|
1794196435
|
1794196440
|
Edit
Delete
|
|
270107
|
Run https://github.com/actions/checkout@v4
|
39033
|
1
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270108
|
Enable pnpm
|
39033
|
2
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270109
|
Run https://github.com/actions/setup-node@v4
|
39033
|
3
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270110
|
Private registry auth (temporary userconfig)
|
39033
|
4
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270111
|
Install locked governance tools
|
39033
|
5
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270112
|
Install runtime workspace (frozen lockfile)
|
39033
|
6
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270113
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39033
|
7
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270114
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39033
|
8
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270115
|
Generate Prisma clients
|
39033
|
9
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270116
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
39033
|
10
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270117
|
Repo-root governance gate
|
39033
|
11
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270118
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
39033
|
12
|
116
|
4
|
25
|
0
|
1794196443
|
1794196443
|
1794196440
|
1794196444
|
Edit
Delete
|
|
270120
|
Run https://github.com/actions/checkout@v4
|
39034
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270121
|
Enable pnpm
|
39034
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270122
|
Run https://github.com/actions/setup-node@v4
|
39034
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270123
|
Private registry auth (temporary userconfig)
|
39034
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270124
|
Install locked governance tools
|
39034
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270125
|
Install runtime workspace (frozen lockfile)
|
39034
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270126
|
Generate clients for authority module unit imports Generate clients for authority module unit imports (no database)...
|
39034
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270127
|
Module / package unit tests
|
39034
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|
|
270128
|
Governance package tests
|
39034
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794196446
|
1794196446
|
Edit
Delete
|