|
273301
|
Run ./.git/ci-actions/checkout
|
39270
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273302
|
Enable pnpm
|
39270
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273303
|
Run ./.git/ci-actions/setup-node
|
39270
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273304
|
Private registry auth (temporary userconfig)
|
39270
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273305
|
Install locked governance tools
|
39270
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273306
|
Resolve npmrc for BuildKit secret (never printed)
|
39270
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273307
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39270
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273308
|
Install syft (pinned) and generate SPDX SBOM
|
39270
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273309
|
Install cosign (pinned)
|
39270
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273310
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39270
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273311
|
Upload image evidence
|
39270
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1794233610
|
1794233610
|
Edit
Delete
|
|
273312
|
Candidate tag (real run attempt, computed per job)
|
39271
|
0
|
116
|
2
|
37
|
3
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273313
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39271
|
1
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273314
|
Run ./.git/ci-actions/checkout
|
39271
|
2
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273315
|
Enable pnpm
|
39271
|
3
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273316
|
Run ./.git/ci-actions/setup-node
|
39271
|
4
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273317
|
Download static evidence
|
39271
|
5
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273318
|
Download runtime evidence
|
39271
|
6
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273319
|
Download identity evidence
|
39271
|
7
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273320
|
Download port-conformance evidence
|
39271
|
8
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273321
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39271
|
9
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273322
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39271
|
10
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273323
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39271
|
11
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273324
|
Upload candidate evidence
|
39271
|
12
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273325
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
39271
|
13
|
116
|
4
|
40
|
0
|
1794233612
|
1794233612
|
1794233612
|
1794233612
|
Edit
Delete
|
|
273326
|
Candidate tag (real run attempt, computed per job)
|
39272
|
0
|
116
|
2
|
23
|
3
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273327
|
Run https://github.com/actions/checkout@v4
|
39272
|
1
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273328
|
Enable pnpm
|
39272
|
2
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273329
|
Run https://github.com/actions/setup-node@v4
|
39272
|
3
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273330
|
Private registry auth (temporary userconfig)
|
39272
|
4
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273331
|
Install locked governance tools
|
39272
|
5
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273332
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39272
|
6
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273333
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39272
|
7
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273334
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39272
|
8
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273335
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
39272
|
9
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273336
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
39272
|
10
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273337
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39272
|
11
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273338
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39272
|
12
|
116
|
4
|
26
|
0
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273339
|
Upload package tarballs
|
39272
|
13
|
116
|
2
|
26
|
3
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273340
|
Upload public static evidence
|
39272
|
14
|
116
|
1
|
29
|
1
|
1794233683
|
1794233683
|
1794233679
|
1794233683
|
Edit
Delete
|
|
273341
|
Candidate tag (real run attempt, computed per job)
|
39273
|
0
|
116
|
2
|
20
|
3
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273342
|
Run https://github.com/actions/checkout@v4
|
39273
|
1
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273343
|
Enable pnpm
|
39273
|
2
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273344
|
Run https://github.com/actions/setup-node@v4
|
39273
|
3
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273345
|
Private registry auth (temporary userconfig)
|
39273
|
4
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273346
|
Install locked governance tools
|
39273
|
5
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273347
|
Install runtime workspace (frozen lockfile)
|
39273
|
6
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273348
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39273
|
7
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273349
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39273
|
8
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|
|
273350
|
Generate Prisma clients
|
39273
|
9
|
116
|
4
|
23
|
0
|
1794233686
|
1794233686
|
1794233683
|
1794233686
|
Edit
Delete
|