|
239484
|
Enable pnpm
|
36501
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239485
|
Run https://github.com/actions/setup-node@v4
|
36501
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239486
|
Private registry auth (temporary userconfig)
|
36501
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239487
|
Install locked governance tools
|
36501
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239488
|
Resolve npmrc for BuildKit secret (never printed)
|
36501
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239489
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
36501
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239490
|
Install syft (pinned) and generate SPDX SBOM
|
36501
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239491
|
Install cosign (pinned)
|
36501
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239492
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
36501
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239493
|
Upload image evidence
|
36501
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793027883
|
1793027883
|
Edit
Delete
|
|
239494
|
Candidate tag (real run attempt, computed per job)
|
36502
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239495
|
Run https://github.com/actions/checkout@v4
|
36502
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239496
|
Enable pnpm
|
36502
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239497
|
Run https://github.com/actions/setup-node@v4
|
36502
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239498
|
Download static evidence
|
36502
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239499
|
Download runtime evidence
|
36502
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239500
|
Download identity evidence
|
36502
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239501
|
Download port-conformance evidence
|
36502
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239502
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
36502
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239503
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
36502
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239504
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
36502
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239505
|
Upload candidate evidence
|
36502
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239506
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
36502
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793027885
|
1793028055
|
Edit
Delete
|
|
239507
|
Candidate tag (real run attempt, computed per job)
|
36503
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239508
|
Run https://github.com/actions/checkout@v4
|
36503
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239509
|
Enable pnpm
|
36503
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239510
|
Run https://github.com/actions/setup-node@v4
|
36503
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239511
|
Private registry auth (temporary userconfig)
|
36503
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239512
|
Install locked governance tools
|
36503
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239513
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
36503
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239514
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
36503
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239515
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
36503
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239516
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
36503
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239517
|
Upload package tarballs
|
36503
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239518
|
Upload public static evidence
|
36503
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033123
|
1793033214
|
Edit
Delete
|
|
239519
|
Candidate tag (real run attempt, computed per job)
|
36504
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239520
|
Run https://github.com/actions/checkout@v4
|
36504
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239521
|
Enable pnpm
|
36504
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239522
|
Run https://github.com/actions/setup-node@v4
|
36504
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239523
|
Private registry auth (temporary userconfig)
|
36504
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239524
|
Install locked governance tools
|
36504
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239525
|
Install runtime workspace (frozen lockfile)
|
36504
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239526
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
36504
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239527
|
Generate Prisma clients
|
36504
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239528
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
36504
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239529
|
Repo-root governance gate
|
36504
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239530
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
36504
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239531
|
Upload static evidence
|
36504
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033214
|
1793033305
|
Edit
Delete
|
|
239532
|
Run https://github.com/actions/checkout@v4
|
36505
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033307
|
1793033307
|
Edit
Delete
|
|
239533
|
Enable pnpm
|
36505
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033307
|
1793033307
|
Edit
Delete
|