|
241781
|
Run https://github.com/actions/checkout@v4
|
36719
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241782
|
Enable pnpm
|
36719
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241783
|
Run https://github.com/actions/setup-node@v4
|
36719
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241784
|
Private registry auth (temporary userconfig)
|
36719
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241785
|
Install locked governance tools
|
36719
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241786
|
Resolve npmrc for BuildKit secret (never printed)
|
36719
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241787
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
36719
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241788
|
Install syft (pinned) and generate SPDX SBOM
|
36719
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241789
|
Install cosign (pinned)
|
36719
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241790
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
36719
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241791
|
Upload image evidence
|
36719
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793124962
|
1793124962
|
Edit
Delete
|
|
241792
|
Candidate tag (real run attempt, computed per job)
|
36720
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241793
|
Run https://github.com/actions/checkout@v4
|
36720
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241794
|
Enable pnpm
|
36720
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241795
|
Run https://github.com/actions/setup-node@v4
|
36720
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241796
|
Download static evidence
|
36720
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241797
|
Download runtime evidence
|
36720
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241798
|
Download identity evidence
|
36720
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241799
|
Download port-conformance evidence
|
36720
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241800
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
36720
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241801
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
36720
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241802
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
36720
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241803
|
Upload candidate evidence
|
36720
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241804
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
36720
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793124964
|
1793124994
|
Edit
Delete
|
|
241805
|
Checkout
|
36721
|
0
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241806
|
Setup Node.js
|
36721
|
1
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241807
|
Enable pnpm
|
36721
|
2
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241808
|
Configure read-only platform package authenticatio Configure read-only platform package authentication...
|
36721
|
3
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241809
|
Install dependencies
|
36721
|
4
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241810
|
Rebuild approved dependency scripts
|
36721
|
5
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241811
|
Audit production dependencies
|
36721
|
6
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241812
|
Generate Prisma clients
|
36721
|
7
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241813
|
Run static governance gate
|
36721
|
8
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126087
|
1793126177
|
Edit
Delete
|
|
241814
|
Run actions/checkout@3d3c42e5aac5ba805825da76410c1 Run actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1...
|
36722
|
0
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241815
|
Run actions/setup-node@949feb2413d6458794dcd2491c4 Run actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1...
|
36722
|
1
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241816
|
Enable pnpm
|
36722
|
2
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241817
|
Configure read-only platform package authenticatio Configure read-only platform package authentication...
|
36722
|
3
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241818
|
Install (frozen lockfile)
|
36722
|
4
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241819
|
check:pins(必需检查)
|
36722
|
5
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241820
|
check:fixtures(必需检查)
|
36722
|
6
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241821
|
Upload governance reports
|
36722
|
7
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126177
|
1793126299
|
Edit
Delete
|
|
241822
|
Checkout
|
36723
|
0
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126299
|
1793126329
|
Edit
Delete
|
|
241823
|
Require every governance and scan result
|
36723
|
1
|
76
|
3
|
0
|
0
|
0
|
0
|
1793126299
|
1793126329
|
Edit
Delete
|
|
241825
|
Candidate tag (real run attempt, computed per job)
|
36725
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793126551
|
1793126971
|
Edit
Delete
|
|
241826
|
Run https://github.com/actions/checkout@v4
|
36725
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793126551
|
1793126971
|
Edit
Delete
|
|
241827
|
Enable pnpm
|
36725
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793126551
|
1793126971
|
Edit
Delete
|
|
241828
|
Run https://github.com/actions/setup-node@v4
|
36725
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793126551
|
1793126971
|
Edit
Delete
|
|
241829
|
Private registry auth (temporary userconfig)
|
36725
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793126551
|
1793126971
|
Edit
Delete
|
|
241830
|
Install locked governance tools
|
36725
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793126551
|
1793126971
|
Edit
Delete
|
|
241831
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
36725
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793126551
|
1793126971
|
Edit
Delete
|