|
165701
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
29587
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974143
|
1789974143
|
Edit
Delete
|
|
165702
|
Upload identity evidence
|
29587
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974143
|
1789974143
|
Edit
Delete
|
|
165703
|
Run actions/checkout@v4
|
29588
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165704
|
Enable pnpm
|
29588
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165705
|
Run actions/setup-node@v4
|
29588
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165706
|
Private registry auth (temporary userconfig)
|
29588
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165707
|
Resolve npmrc for BuildKit secret (never printed)
|
29588
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165708
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
29588
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165709
|
Install syft (pinned) and generate SPDX SBOM
|
29588
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165710
|
Install cosign (pinned)
|
29588
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165711
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
29588
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165712
|
Upload image evidence
|
29588
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974145
|
1789974145
|
Edit
Delete
|
|
165713
|
Run actions/checkout@v4
|
29589
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165714
|
Enable pnpm
|
29589
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165715
|
Run actions/setup-node@v4
|
29589
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165716
|
Download static evidence
|
29589
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165717
|
Download runtime evidence
|
29589
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165718
|
Download identity evidence
|
29589
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165719
|
Download port-conformance evidence
|
29589
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165720
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
29589
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165721
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
29589
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165722
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
29589
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165723
|
Upload candidate evidence
|
29589
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165724
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
29589
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974147
|
1789974177
|
Edit
Delete
|
|
165725
|
Run actions/checkout@v4
|
29590
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165726
|
Enable pnpm
|
29590
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165727
|
Run actions/setup-node@v4
|
29590
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165728
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
29590
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165729
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
29590
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165730
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
29590
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165731
|
Upload package tarballs
|
29590
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165732
|
Upload public static evidence
|
29590
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1789974349
|
1789974379
|
Edit
Delete
|
|
165733
|
Run actions/checkout@v4
|
29591
|
0
|
116
|
1
|
30
|
111
|
1789974385
|
1789974389
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165734
|
Enable pnpm
|
29591
|
1
|
116
|
1
|
141
|
1
|
1789974389
|
1789974389
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165735
|
Run actions/setup-node@v4
|
29591
|
2
|
116
|
1
|
142
|
16
|
1789974389
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165736
|
Private registry auth (temporary userconfig)
|
29591
|
3
|
116
|
2
|
158
|
5
|
1789974391
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165737
|
Install runtime workspace (frozen lockfile)
|
29591
|
4
|
116
|
4
|
163
|
0
|
1789974391
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165738
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
29591
|
5
|
116
|
4
|
163
|
0
|
1789974391
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165739
|
Generate Prisma clients
|
29591
|
6
|
116
|
4
|
163
|
0
|
1789974391
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165740
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
29591
|
7
|
116
|
4
|
163
|
0
|
1789974391
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165741
|
Repo-root governance gate
|
29591
|
8
|
116
|
4
|
163
|
0
|
1789974391
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165742
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
29591
|
9
|
116
|
4
|
163
|
0
|
1789974391
|
1789974391
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165743
|
Upload static evidence
|
29591
|
10
|
116
|
1
|
163
|
17
|
1789974391
|
1789974392
|
1789974380
|
1789974392
|
Edit
Delete
|
|
165744
|
Run actions/checkout@v4
|
29592
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974395
|
1789974395
|
Edit
Delete
|
|
165745
|
Enable pnpm
|
29592
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974395
|
1789974395
|
Edit
Delete
|
|
165746
|
Run actions/setup-node@v4
|
29592
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974395
|
1789974395
|
Edit
Delete
|
|
165747
|
Private registry auth (temporary userconfig)
|
29592
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974395
|
1789974395
|
Edit
Delete
|
|
165748
|
Install runtime workspace (frozen lockfile)
|
29592
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974395
|
1789974395
|
Edit
Delete
|
|
165749
|
Generate clients for authority module unit imports Generate clients for authority module unit imports (no database)...
|
29592
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974395
|
1789974395
|
Edit
Delete
|
|
165750
|
Module / package unit tests
|
29592
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789974395
|
1789974395
|
Edit
Delete
|