|
154551
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
28413
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648127
|
1789648127
|
Edit
Delete
|
|
154552
|
Upload identity evidence
|
28413
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648127
|
1789648127
|
Edit
Delete
|
|
154553
|
Run actions/checkout@v4
|
28414
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154554
|
Enable pnpm
|
28414
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154555
|
Run actions/setup-node@v4
|
28414
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154556
|
Private registry auth (temporary userconfig)
|
28414
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154557
|
Resolve npmrc for BuildKit secret (never printed)
|
28414
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154558
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
28414
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154559
|
Install syft (pinned) and generate SPDX SBOM
|
28414
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154560
|
Install cosign (pinned)
|
28414
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154561
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
28414
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154562
|
Upload image evidence
|
28414
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1789648129
|
1789648129
|
Edit
Delete
|
|
154563
|
Run actions/checkout@v4
|
28415
|
0
|
116
|
1
|
79
|
103
|
1789648141
|
1789648144
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154564
|
Enable pnpm
|
28415
|
1
|
116
|
1
|
182
|
1
|
1789648144
|
1789648144
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154565
|
Run actions/setup-node@v4
|
28415
|
2
|
116
|
1
|
183
|
13
|
1789648144
|
1789648145
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154566
|
Download static evidence
|
28415
|
3
|
116
|
2
|
196
|
34
|
1789648145
|
1789648325
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154567
|
Download runtime evidence
|
28415
|
4
|
116
|
2
|
230
|
34
|
1789648325
|
1789648505
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154568
|
Download identity evidence
|
28415
|
5
|
116
|
2
|
264
|
34
|
1789648505
|
1789648685
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154569
|
Download port-conformance evidence
|
28415
|
6
|
116
|
2
|
298
|
34
|
1789648685
|
1789648866
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154570
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
28415
|
7
|
116
|
2
|
332
|
15
|
1789648866
|
1789648866
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154571
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
28415
|
8
|
116
|
2
|
347
|
35
|
1789648866
|
1789649046
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154572
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
28415
|
9
|
116
|
4
|
382
|
0
|
1789649046
|
1789649046
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154573
|
Upload candidate evidence
|
28415
|
10
|
116
|
1
|
382
|
17
|
1789649046
|
1789649046
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154574
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
28415
|
11
|
116
|
2
|
399
|
3
|
1789649046
|
1789649046
|
1789648131
|
1789649047
|
Edit
Delete
|
|
154575
|
Run actions/checkout@v4
|
28416
|
0
|
116
|
1
|
33
|
103
|
1789655389
|
1789655392
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154576
|
Enable pnpm
|
28416
|
1
|
116
|
1
|
136
|
1
|
1789655392
|
1789655392
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154577
|
Run actions/setup-node@v4
|
28416
|
2
|
116
|
1
|
137
|
13
|
1789655392
|
1789655393
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154578
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
28416
|
3
|
116
|
1
|
150
|
16
|
1789655393
|
1789655394
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154579
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
28416
|
4
|
116
|
2
|
166
|
672
|
1789655394
|
1789655408
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154580
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
28416
|
5
|
116
|
4
|
838
|
0
|
1789655408
|
1789655408
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154581
|
Upload package tarballs
|
28416
|
6
|
116
|
2
|
838
|
3
|
1789655408
|
1789655408
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154582
|
Upload public static evidence
|
28416
|
7
|
116
|
1
|
841
|
15
|
1789655408
|
1789655409
|
1789655383
|
1789655410
|
Edit
Delete
|
|
154583
|
Run actions/checkout@v4
|
28417
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154584
|
Enable pnpm
|
28417
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154585
|
Run actions/setup-node@v4
|
28417
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154586
|
Private registry auth (temporary userconfig)
|
28417
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154587
|
Install runtime workspace (frozen lockfile)
|
28417
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154588
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
28417
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154589
|
Generate Prisma clients
|
28417
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154590
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
28417
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154591
|
Repo-root governance gate
|
28417
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154592
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
28417
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154593
|
Upload static evidence
|
28417
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1789655410
|
1789655449
|
Edit
Delete
|
|
154594
|
Run actions/checkout@v4
|
28418
|
0
|
117
|
3
|
0
|
0
|
0
|
0
|
1789655449
|
1789655479
|
Edit
Delete
|
|
154595
|
Enable pnpm
|
28418
|
1
|
117
|
3
|
0
|
0
|
0
|
0
|
1789655449
|
1789655479
|
Edit
Delete
|
|
154596
|
Run actions/setup-node@v4
|
28418
|
2
|
117
|
3
|
0
|
0
|
0
|
0
|
1789655449
|
1789655479
|
Edit
Delete
|
|
154597
|
Governance tests
|
28418
|
3
|
117
|
3
|
0
|
0
|
0
|
0
|
1789655449
|
1789655479
|
Edit
Delete
|
|
154598
|
Governance gates (all gates run to completion; not Governance gates (all gates run to completion; not blocking yet)...
|
28418
|
4
|
117
|
3
|
0
|
0
|
0
|
0
|
1789655449
|
1789655479
|
Edit
Delete
|
|
154599
|
Tracked-secrets gate (root scope; the only gate wh Tracked-secrets gate (root scope; the only gate whose CI result is meaningful without nested repos)...
|
28418
|
5
|
117
|
3
|
0
|
0
|
0
|
0
|
1789655449
|
1789655479
|
Edit
Delete
|
|
154600
|
Run actions/checkout@v4
|
28419
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789655479
|
1789655480
|
Edit
Delete
|