|
273051
|
Private registry auth (temporary userconfig)
|
39249
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273052
|
Install locked governance tools
|
39249
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273053
|
Resolve npmrc for BuildKit secret (never printed)
|
39249
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273054
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39249
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273055
|
Install syft (pinned) and generate SPDX SBOM
|
39249
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273056
|
Install cosign (pinned)
|
39249
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273057
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39249
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273058
|
Upload image evidence
|
39249
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1794231671
|
1794231671
|
Edit
Delete
|
|
273059
|
Candidate tag (real run attempt, computed per job)
|
39250
|
0
|
116
|
2
|
37
|
3
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273060
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39250
|
1
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273061
|
Run ./.git/ci-actions/checkout
|
39250
|
2
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273062
|
Enable pnpm
|
39250
|
3
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273063
|
Run ./.git/ci-actions/setup-node
|
39250
|
4
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273064
|
Download static evidence
|
39250
|
5
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273065
|
Download runtime evidence
|
39250
|
6
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273066
|
Download identity evidence
|
39250
|
7
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273067
|
Download port-conformance evidence
|
39250
|
8
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273068
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39250
|
9
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273069
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39250
|
10
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273070
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39250
|
11
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273071
|
Upload candidate evidence
|
39250
|
12
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273072
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
39250
|
13
|
116
|
4
|
40
|
0
|
1794231673
|
1794231673
|
1794231673
|
1794231673
|
Edit
Delete
|
|
273073
|
Measure fixed metadata only in a limited readonly Measure fixed metadata only in a limited readonly unit...
|
39251
|
0
|
116
|
2
|
8
|
10
|
1794231775
|
1794231775
|
1794231775
|
1794231776
|
Edit
Delete
|
|
273074
|
Candidate tag (real run attempt, computed per job)
|
39252
|
0
|
116
|
2
|
9
|
3
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273075
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39252
|
1
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273076
|
Run ./.git/ci-actions/checkout
|
39252
|
2
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273077
|
Enable pnpm
|
39252
|
3
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273078
|
Run ./.git/ci-actions/setup-node
|
39252
|
4
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273079
|
Private registry auth (temporary userconfig)
|
39252
|
5
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273080
|
Install locked governance tools
|
39252
|
6
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273081
|
Test bounded Action preparation (synthetic credent Test bounded Action preparation (synthetic credentials only)...
|
39252
|
7
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273082
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39252
|
8
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273083
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39252
|
9
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273084
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39252
|
10
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273085
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
39252
|
11
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273086
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
39252
|
12
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273087
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39252
|
13
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273088
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39252
|
14
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273089
|
Upload package tarballs
|
39252
|
15
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273090
|
Upload public static evidence
|
39252
|
16
|
116
|
4
|
12
|
0
|
1794231781
|
1794231781
|
1794231781
|
1794231781
|
Edit
Delete
|
|
273091
|
Candidate tag (real run attempt, computed per job)
|
39253
|
0
|
116
|
2
|
9
|
3
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273092
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39253
|
1
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273093
|
Run ./.git/ci-actions/checkout
|
39253
|
2
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273094
|
Enable pnpm
|
39253
|
3
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273095
|
Run ./.git/ci-actions/setup-node
|
39253
|
4
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273096
|
Private registry auth (temporary userconfig)
|
39253
|
5
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273097
|
Install locked governance tools
|
39253
|
6
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273098
|
Install runtime workspace (frozen lockfile)
|
39253
|
7
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273099
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39253
|
8
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|
|
273100
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39253
|
9
|
116
|
4
|
12
|
0
|
1794231783
|
1794231783
|
1794231783
|
1794231783
|
Edit
Delete
|