|
264657
|
Upload static evidence
|
38622
|
13
|
116
|
1
|
23
|
3
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264656
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38622
|
12
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264655
|
Repo-root governance gate
|
38622
|
11
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264654
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38622
|
10
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264653
|
Generate Prisma clients
|
38622
|
9
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264652
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38622
|
8
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264651
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38622
|
7
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264650
|
Install runtime workspace (frozen lockfile)
|
38622
|
6
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264649
|
Install locked governance tools
|
38622
|
5
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264648
|
Private registry auth (temporary userconfig)
|
38622
|
4
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264647
|
Run https://github.com/actions/setup-node@v4
|
38622
|
3
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264646
|
Enable pnpm
|
38622
|
2
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264645
|
Run https://github.com/actions/checkout@v4
|
38622
|
1
|
116
|
4
|
23
|
0
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264644
|
Candidate tag (real run attempt, computed per job)
|
38622
|
0
|
116
|
2
|
20
|
3
|
1793891497
|
1793891497
|
1793891494
|
1793891497
|
Edit
Delete
|
|
264643
|
Upload public static evidence
|
38621
|
14
|
116
|
1
|
29
|
1
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264642
|
Upload package tarballs
|
38621
|
13
|
116
|
2
|
26
|
3
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264641
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38621
|
12
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264640
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38621
|
11
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264639
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38621
|
10
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264638
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38621
|
9
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264637
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38621
|
8
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264636
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38621
|
7
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264635
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38621
|
6
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264634
|
Install locked governance tools
|
38621
|
5
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264633
|
Private registry auth (temporary userconfig)
|
38621
|
4
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264632
|
Run https://github.com/actions/setup-node@v4
|
38621
|
3
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264631
|
Enable pnpm
|
38621
|
2
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264630
|
Run https://github.com/actions/checkout@v4
|
38621
|
1
|
116
|
4
|
26
|
0
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264629
|
Candidate tag (real run attempt, computed per job)
|
38621
|
0
|
116
|
2
|
23
|
3
|
1793891494
|
1793891494
|
1793891489
|
1793891494
|
Edit
Delete
|
|
264628
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38620
|
12
|
116
|
2
|
71
|
3
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264627
|
Upload candidate evidence
|
38620
|
11
|
116
|
2
|
66
|
5
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264626
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38620
|
10
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264625
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38620
|
9
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264624
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38620
|
8
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264623
|
Download port-conformance evidence
|
38620
|
7
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264622
|
Download identity evidence
|
38620
|
6
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264621
|
Download runtime evidence
|
38620
|
5
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264620
|
Download static evidence
|
38620
|
4
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264619
|
Run https://github.com/actions/setup-node@v4
|
38620
|
3
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264618
|
Enable pnpm
|
38620
|
2
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264617
|
Run https://github.com/actions/checkout@v4
|
38620
|
1
|
116
|
4
|
66
|
0
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264616
|
Candidate tag (real run attempt, computed per job)
|
38620
|
0
|
116
|
2
|
63
|
3
|
1793890688
|
1793890688
|
1793890679
|
1793890688
|
Edit
Delete
|
|
264615
|
Upload image evidence
|
38619
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|
|
264614
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38619
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|
|
264613
|
Install cosign (pinned)
|
38619
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|
|
264612
|
Install syft (pinned) and generate SPDX SBOM
|
38619
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|
|
264611
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38619
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|
|
264610
|
Resolve npmrc for BuildKit secret (never printed)
|
38619
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|
|
264609
|
Install locked governance tools
|
38619
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|
|
264608
|
Private registry auth (temporary userconfig)
|
38619
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793890677
|
1793890678
|
Edit
Delete
|