|
150785
|
Run actions/setup-node@v4
|
28017
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150786
|
Private registry auth (temporary userconfig)
|
28017
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150787
|
Resolve npmrc for BuildKit secret (never printed)
|
28017
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150788
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
28017
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150789
|
Install syft (pinned) and generate SPDX SBOM
|
28017
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150790
|
Install cosign (pinned)
|
28017
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150791
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
28017
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150792
|
Upload image evidence
|
28017
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1789221418
|
1789221418
|
Edit
Delete
|
|
150793
|
Run actions/checkout@v4
|
28018
|
0
|
116
|
1
|
73
|
66
|
1789221427
|
1789221428
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150794
|
Enable pnpm
|
28018
|
1
|
116
|
1
|
139
|
1
|
1789221428
|
1789221428
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150795
|
Run actions/setup-node@v4
|
28018
|
2
|
116
|
1
|
140
|
13
|
1789221428
|
1789221429
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150796
|
Download static evidence
|
28018
|
3
|
116
|
2
|
153
|
4
|
1789221429
|
1789221429
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150797
|
Download runtime evidence
|
28018
|
4
|
116
|
2
|
157
|
4
|
1789221429
|
1789221430
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150798
|
Download identity evidence
|
28018
|
5
|
116
|
2
|
161
|
4
|
1789221430
|
1789221430
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150799
|
Download port-conformance evidence
|
28018
|
6
|
116
|
2
|
165
|
4
|
1789221430
|
1789221431
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150800
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
28018
|
7
|
116
|
2
|
169
|
13
|
1789221431
|
1789221431
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150801
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
28018
|
8
|
116
|
2
|
182
|
5
|
1789221431
|
1789221431
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150802
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
28018
|
9
|
116
|
4
|
187
|
0
|
1789221431
|
1789221431
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150803
|
Upload candidate evidence
|
28018
|
10
|
116
|
2
|
187
|
7
|
1789221431
|
1789221432
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150804
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
28018
|
11
|
116
|
2
|
194
|
3
|
1789221432
|
1789221432
|
1789221420
|
1789221432
|
Edit
Delete
|
|
150821
|
Run actions/checkout@v4
|
28022
|
0
|
116
|
1
|
33
|
66
|
1789222361
|
1789222363
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150822
|
Enable pnpm
|
28022
|
1
|
116
|
1
|
99
|
1
|
1789222363
|
1789222363
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150823
|
Run actions/setup-node@v4
|
28022
|
2
|
116
|
1
|
100
|
13
|
1789222363
|
1789222363
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150824
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
28022
|
3
|
116
|
1
|
113
|
16
|
1789222363
|
1789222364
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150825
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
28022
|
4
|
116
|
1
|
129
|
326
|
1789222364
|
1789222377
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150826
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
28022
|
5
|
116
|
1
|
455
|
128
|
1789222377
|
1789222380
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150827
|
Upload package tarballs
|
28022
|
6
|
116
|
2
|
583
|
5
|
1789222380
|
1789222381
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150828
|
Upload public static evidence
|
28022
|
7
|
116
|
2
|
588
|
5
|
1789222381
|
1789222381
|
1789222355
|
1789222382
|
Edit
Delete
|
|
150829
|
Run actions/checkout@v4
|
28023
|
0
|
116
|
1
|
30
|
66
|
1789222387
|
1789222388
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150830
|
Enable pnpm
|
28023
|
1
|
116
|
1
|
96
|
1
|
1789222388
|
1789222389
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150831
|
Run actions/setup-node@v4
|
28023
|
2
|
116
|
1
|
97
|
16
|
1789222389
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150832
|
Private registry auth (temporary userconfig)
|
28023
|
3
|
116
|
2
|
113
|
5
|
1789222390
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150833
|
Install runtime workspace (frozen lockfile)
|
28023
|
4
|
116
|
4
|
118
|
0
|
1789222390
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150834
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
28023
|
5
|
116
|
4
|
118
|
0
|
1789222390
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150835
|
Generate Prisma clients
|
28023
|
6
|
116
|
4
|
118
|
0
|
1789222390
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150836
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
28023
|
7
|
116
|
4
|
118
|
0
|
1789222390
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150837
|
Repo-root governance gate
|
28023
|
8
|
116
|
4
|
118
|
0
|
1789222390
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150838
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
28023
|
9
|
116
|
4
|
118
|
0
|
1789222390
|
1789222390
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150839
|
Upload static evidence
|
28023
|
10
|
116
|
2
|
118
|
7
|
1789222390
|
1789222391
|
1789222382
|
1789222391
|
Edit
Delete
|
|
150840
|
Run actions/checkout@v4
|
28024
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222393
|
1789222394
|
Edit
Delete
|
|
150841
|
Enable pnpm
|
28024
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222393
|
1789222394
|
Edit
Delete
|
|
150842
|
Run actions/setup-node@v4
|
28024
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222393
|
1789222394
|
Edit
Delete
|
|
150843
|
Private registry auth (temporary userconfig)
|
28024
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222393
|
1789222394
|
Edit
Delete
|
|
150844
|
Install runtime workspace (frozen lockfile)
|
28024
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222393
|
1789222394
|
Edit
Delete
|
|
150845
|
Module / package unit tests
|
28024
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222393
|
1789222394
|
Edit
Delete
|
|
150846
|
Governance package tests
|
28024
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222393
|
1789222394
|
Edit
Delete
|
|
150847
|
Run actions/checkout@v4
|
28025
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222395
|
1789222396
|
Edit
Delete
|
|
150848
|
Enable pnpm
|
28025
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222395
|
1789222396
|
Edit
Delete
|
|
150849
|
Run actions/setup-node@v4
|
28025
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222395
|
1789222396
|
Edit
Delete
|
|
150850
|
Private registry auth (temporary userconfig)
|
28025
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789222395
|
1789222396
|
Edit
Delete
|