|
257561
|
Resolve npmrc for BuildKit secret (never printed)
|
38081
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676054
|
1793676054
|
Edit
Delete
|
|
257562
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38081
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676054
|
1793676054
|
Edit
Delete
|
|
257563
|
Install syft (pinned) and generate SPDX SBOM
|
38081
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676054
|
1793676054
|
Edit
Delete
|
|
257564
|
Install cosign (pinned)
|
38081
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676054
|
1793676054
|
Edit
Delete
|
|
257565
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38081
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676054
|
1793676054
|
Edit
Delete
|
|
257566
|
Upload image evidence
|
38081
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676054
|
1793676054
|
Edit
Delete
|
|
257567
|
Candidate tag (real run attempt, computed per job)
|
38082
|
0
|
116
|
2
|
68
|
3
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257568
|
Run https://github.com/actions/checkout@v4
|
38082
|
1
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257569
|
Enable pnpm
|
38082
|
2
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257570
|
Run https://github.com/actions/setup-node@v4
|
38082
|
3
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257571
|
Download static evidence
|
38082
|
4
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257572
|
Download runtime evidence
|
38082
|
5
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257573
|
Download identity evidence
|
38082
|
6
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257574
|
Download port-conformance evidence
|
38082
|
7
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257575
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38082
|
8
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257576
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38082
|
9
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257577
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38082
|
10
|
116
|
4
|
71
|
0
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257578
|
Upload candidate evidence
|
38082
|
11
|
116
|
2
|
71
|
5
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257579
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38082
|
12
|
116
|
2
|
76
|
3
|
1793676065
|
1793676065
|
1793676056
|
1793676065
|
Edit
Delete
|
|
257580
|
Candidate tag (real run attempt, computed per job)
|
38083
|
0
|
116
|
2
|
23
|
3
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257581
|
Run https://github.com/actions/checkout@v4
|
38083
|
1
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257582
|
Enable pnpm
|
38083
|
2
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257583
|
Run https://github.com/actions/setup-node@v4
|
38083
|
3
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257584
|
Private registry auth (temporary userconfig)
|
38083
|
4
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257585
|
Install locked governance tools
|
38083
|
5
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257586
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38083
|
6
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257587
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38083
|
7
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257588
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38083
|
8
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257589
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38083
|
9
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257590
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38083
|
10
|
116
|
4
|
26
|
0
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257591
|
Upload package tarballs
|
38083
|
11
|
116
|
2
|
26
|
3
|
1793676471
|
1793676471
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257592
|
Upload public static evidence
|
38083
|
12
|
116
|
1
|
29
|
1
|
1793676471
|
1793676472
|
1793676468
|
1793676472
|
Edit
Delete
|
|
257593
|
Candidate tag (real run attempt, computed per job)
|
38084
|
0
|
116
|
2
|
20
|
3
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257594
|
Run https://github.com/actions/checkout@v4
|
38084
|
1
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257595
|
Enable pnpm
|
38084
|
2
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257596
|
Run https://github.com/actions/setup-node@v4
|
38084
|
3
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257597
|
Private registry auth (temporary userconfig)
|
38084
|
4
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257598
|
Install locked governance tools
|
38084
|
5
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257599
|
Install runtime workspace (frozen lockfile)
|
38084
|
6
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257600
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38084
|
7
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257601
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38084
|
8
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257602
|
Generate Prisma clients
|
38084
|
9
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257603
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38084
|
10
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257604
|
Repo-root governance gate
|
38084
|
11
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257605
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38084
|
12
|
116
|
4
|
23
|
0
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257606
|
Upload static evidence
|
38084
|
13
|
116
|
1
|
23
|
3
|
1793676475
|
1793676475
|
1793676472
|
1793676475
|
Edit
Delete
|
|
257607
|
Run https://github.com/actions/checkout@v4
|
38085
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676477
|
1793676478
|
Edit
Delete
|
|
257608
|
Enable pnpm
|
38085
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676477
|
1793676478
|
Edit
Delete
|
|
257609
|
Run https://github.com/actions/setup-node@v4
|
38085
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676477
|
1793676478
|
Edit
Delete
|
|
257610
|
Private registry auth (temporary userconfig)
|
38085
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793676477
|
1793676478
|
Edit
Delete
|