|
272086
|
Enable pnpm
|
39184
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272087
|
Run https://github.com/actions/setup-node@v4
|
39184
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272088
|
Private registry auth (temporary userconfig)
|
39184
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272089
|
Install locked governance tools
|
39184
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272090
|
Resolve npmrc for BuildKit secret (never printed)
|
39184
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272091
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39184
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272092
|
Install syft (pinned) and generate SPDX SBOM
|
39184
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272093
|
Install cosign (pinned)
|
39184
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272094
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39184
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272095
|
Upload image evidence
|
39184
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214797
|
1794214797
|
Edit
Delete
|
|
272097
|
Run https://github.com/actions/checkout@v4
|
39185
|
1
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272098
|
Enable pnpm
|
39185
|
2
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272099
|
Run https://github.com/actions/setup-node@v4
|
39185
|
3
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272100
|
Private registry auth (temporary userconfig)
|
39185
|
4
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272101
|
Install locked governance tools
|
39185
|
5
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272102
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39185
|
6
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272103
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39185
|
7
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272104
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39185
|
8
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272105
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
39185
|
9
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272106
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
39185
|
10
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272107
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39185
|
11
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272108
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39185
|
12
|
116
|
4
|
26
|
0
|
1794214803
|
1794214803
|
1794214799
|
1794214804
|
Edit
Delete
|
|
272112
|
Run https://github.com/actions/checkout@v4
|
39186
|
1
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272113
|
Enable pnpm
|
39186
|
2
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272114
|
Run https://github.com/actions/setup-node@v4
|
39186
|
3
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272115
|
Private registry auth (temporary userconfig)
|
39186
|
4
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272116
|
Install locked governance tools
|
39186
|
5
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272117
|
Install runtime workspace (frozen lockfile)
|
39186
|
6
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272118
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39186
|
7
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272119
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39186
|
8
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272120
|
Generate Prisma clients
|
39186
|
9
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272121
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
39186
|
10
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272122
|
Repo-root governance gate
|
39186
|
11
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272123
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
39186
|
12
|
116
|
4
|
23
|
0
|
1794214807
|
1794214807
|
1794214804
|
1794214808
|
Edit
Delete
|
|
272126
|
Run https://github.com/actions/checkout@v4
|
39187
|
1
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272127
|
Enable pnpm
|
39187
|
2
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272128
|
Run https://github.com/actions/setup-node@v4
|
39187
|
3
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272129
|
Download static evidence
|
39187
|
4
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272130
|
Download runtime evidence
|
39187
|
5
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272131
|
Download identity evidence
|
39187
|
6
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272132
|
Download port-conformance evidence
|
39187
|
7
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272133
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39187
|
8
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272134
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39187
|
9
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272135
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39187
|
10
|
116
|
4
|
73
|
0
|
1794214816
|
1794214816
|
1794214808
|
1794214816
|
Edit
Delete
|
|
272138
|
Run https://github.com/actions/checkout@v4
|
39188
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214817
|
1794214817
|
Edit
Delete
|
|
272139
|
Enable pnpm
|
39188
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214817
|
1794214817
|
Edit
Delete
|
|
272140
|
Run https://github.com/actions/setup-node@v4
|
39188
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214817
|
1794214817
|
Edit
Delete
|
|
272141
|
Private registry auth (temporary userconfig)
|
39188
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214817
|
1794214817
|
Edit
Delete
|
|
272142
|
Install locked governance tools
|
39188
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214817
|
1794214817
|
Edit
Delete
|
|
272143
|
Install runtime workspace (frozen lockfile)
|
39188
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214817
|
1794214817
|
Edit
Delete
|