|
267706
|
Private registry auth (temporary userconfig)
|
38848
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103140
|
1794103140
|
Edit
Delete
|
|
267705
|
Run https://github.com/actions/setup-node@v4
|
38848
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103140
|
1794103140
|
Edit
Delete
|
|
267704
|
Enable pnpm
|
38848
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103140
|
1794103140
|
Edit
Delete
|
|
267703
|
Run https://github.com/actions/checkout@v4
|
38848
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794103140
|
1794103140
|
Edit
Delete
|
|
267702
|
Upload static evidence
|
38847
|
13
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267701
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38847
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267700
|
Repo-root governance gate
|
38847
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267699
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38847
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267698
|
Generate Prisma clients
|
38847
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267697
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38847
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267696
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38847
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267695
|
Install runtime workspace (frozen lockfile)
|
38847
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267694
|
Install locked governance tools
|
38847
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267693
|
Private registry auth (temporary userconfig)
|
38847
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267692
|
Run https://github.com/actions/setup-node@v4
|
38847
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267691
|
Enable pnpm
|
38847
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267690
|
Run https://github.com/actions/checkout@v4
|
38847
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267689
|
Candidate tag (real run attempt, computed per job)
|
38847
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102842
|
1794103137
|
Edit
Delete
|
|
267688
|
Upload public static evidence
|
38846
|
14
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267687
|
Upload package tarballs
|
38846
|
13
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267686
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38846
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267685
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38846
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267684
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38846
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267683
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38846
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267682
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38846
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267681
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38846
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267680
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38846
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267679
|
Install locked governance tools
|
38846
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267678
|
Private registry auth (temporary userconfig)
|
38846
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267677
|
Run https://github.com/actions/setup-node@v4
|
38846
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267676
|
Enable pnpm
|
38846
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267675
|
Run https://github.com/actions/checkout@v4
|
38846
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267674
|
Candidate tag (real run attempt, computed per job)
|
38846
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794102751
|
1794102841
|
Edit
Delete
|
|
267495
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38829
|
12
|
116
|
2
|
71
|
3
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267494
|
Upload candidate evidence
|
38829
|
11
|
116
|
2
|
66
|
5
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267493
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38829
|
10
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267492
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38829
|
9
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267491
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38829
|
8
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267490
|
Download port-conformance evidence
|
38829
|
7
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267489
|
Download identity evidence
|
38829
|
6
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267488
|
Download runtime evidence
|
38829
|
5
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267487
|
Download static evidence
|
38829
|
4
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267486
|
Run https://github.com/actions/setup-node@v4
|
38829
|
3
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267485
|
Enable pnpm
|
38829
|
2
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267484
|
Run https://github.com/actions/checkout@v4
|
38829
|
1
|
116
|
4
|
66
|
0
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267483
|
Candidate tag (real run attempt, computed per job)
|
38829
|
0
|
116
|
2
|
63
|
3
|
1794061204
|
1794061204
|
1794061198
|
1794061204
|
Edit
Delete
|
|
267482
|
Upload image evidence
|
38828
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794061196
|
1794061197
|
Edit
Delete
|
|
267481
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38828
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794061196
|
1794061197
|
Edit
Delete
|
|
267480
|
Install cosign (pinned)
|
38828
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794061196
|
1794061197
|
Edit
Delete
|
|
267479
|
Install syft (pinned) and generate SPDX SBOM
|
38828
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794061196
|
1794061197
|
Edit
Delete
|