|
274301
|
Enable pnpm
|
39354
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274302
|
Run ./.git/ci-actions/setup-node
|
39354
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274303
|
Private registry auth (temporary userconfig)
|
39354
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274304
|
Install locked governance tools
|
39354
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274305
|
Resolve npmrc for BuildKit secret (never printed)
|
39354
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274306
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39354
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274307
|
Install syft (pinned) and generate SPDX SBOM
|
39354
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274308
|
Install cosign (pinned)
|
39354
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274309
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39354
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274310
|
Upload image evidence
|
39354
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1794243681
|
1794243681
|
Edit
Delete
|
|
274311
|
Candidate tag (real run attempt, computed per job)
|
39355
|
0
|
116
|
2
|
37
|
3
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274312
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39355
|
1
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274313
|
Run ./.git/ci-actions/checkout
|
39355
|
2
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274314
|
Enable pnpm
|
39355
|
3
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274315
|
Run ./.git/ci-actions/setup-node
|
39355
|
4
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274316
|
Download static evidence
|
39355
|
5
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274317
|
Download runtime evidence
|
39355
|
6
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274318
|
Download identity evidence
|
39355
|
7
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274319
|
Download port-conformance evidence
|
39355
|
8
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274320
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39355
|
9
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274321
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39355
|
10
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274322
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39355
|
11
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274323
|
Upload candidate evidence
|
39355
|
12
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274324
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
39355
|
13
|
116
|
4
|
40
|
0
|
1794243683
|
1794243683
|
1794243683
|
1794243683
|
Edit
Delete
|
|
274325
|
Run actions/checkout@v4
|
39356
|
0
|
117
|
1
|
27
|
56
|
1794244150
|
1794244151
|
1794244145
|
1794244163
|
Edit
Delete
|
|
274326
|
Enable pnpm
|
39356
|
1
|
117
|
1
|
83
|
1
|
1794244151
|
1794244151
|
1794244145
|
1794244163
|
Edit
Delete
|
|
274327
|
Run actions/setup-node@v4
|
39356
|
2
|
117
|
1
|
84
|
11
|
1794244151
|
1794244152
|
1794244145
|
1794244163
|
Edit
Delete
|
|
274328
|
Governance tests
|
39356
|
3
|
117
|
2
|
95
|
1280
|
1794244152
|
1794244158
|
1794244145
|
1794244163
|
Edit
Delete
|
|
274329
|
Governance gates (all gates run to completion; not Governance gates (all gates run to completion; not blocking yet)...
|
39356
|
4
|
117
|
2
|
1375
|
23
|
1794244158
|
1794244160
|
1794244145
|
1794244163
|
Edit
Delete
|
|
274330
|
Tracked-secrets gate (root scope; the only gate wh Tracked-secrets gate (root scope; the only gate whose CI result is meaningful without nested repos)...
|
39356
|
5
|
117
|
1
|
1398
|
2
|
1794244160
|
1794244162
|
1794244145
|
1794244163
|
Edit
Delete
|