|
163251
|
Run actions/checkout@v4
|
29341
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163252
|
Enable pnpm
|
29341
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163253
|
Run actions/setup-node@v4
|
29341
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163254
|
Private registry auth (temporary userconfig)
|
29341
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163255
|
Resolve npmrc for BuildKit secret (never printed)
|
29341
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163256
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
29341
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163257
|
Install syft (pinned) and generate SPDX SBOM
|
29341
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163258
|
Install cosign (pinned)
|
29341
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163259
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
29341
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163260
|
Upload image evidence
|
29341
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1789869167
|
1789869168
|
Edit
Delete
|
|
163261
|
Run actions/checkout@v4
|
29342
|
0
|
116
|
1
|
79
|
108
|
1789869181
|
1789869185
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163262
|
Enable pnpm
|
29342
|
1
|
116
|
1
|
187
|
1
|
1789869185
|
1789869185
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163263
|
Run actions/setup-node@v4
|
29342
|
2
|
116
|
1
|
188
|
13
|
1789869185
|
1789869185
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163264
|
Download static evidence
|
29342
|
3
|
116
|
1
|
201
|
5
|
1789869185
|
1789869186
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163265
|
Download runtime evidence
|
29342
|
4
|
116
|
2
|
206
|
3
|
1789869186
|
1789869186
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163266
|
Download identity evidence
|
29342
|
5
|
116
|
2
|
209
|
3
|
1789869186
|
1789869186
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163267
|
Download port-conformance evidence
|
29342
|
6
|
116
|
2
|
212
|
3
|
1789869186
|
1789869186
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163268
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
29342
|
7
|
116
|
2
|
215
|
18
|
1789869186
|
1789869186
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163269
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
29342
|
8
|
116
|
2
|
233
|
4
|
1789869186
|
1789869187
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163270
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
29342
|
9
|
116
|
4
|
237
|
0
|
1789869187
|
1789869187
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163271
|
Upload candidate evidence
|
29342
|
10
|
116
|
1
|
237
|
17
|
1789869187
|
1789869187
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163272
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
29342
|
11
|
116
|
2
|
254
|
3
|
1789869187
|
1789869187
|
1789869169
|
1789869188
|
Edit
Delete
|
|
163273
|
Run actions/checkout@v4
|
29343
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163274
|
Enable pnpm
|
29343
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163275
|
Run actions/setup-node@v4
|
29343
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163276
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
29343
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163277
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
29343
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163278
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
29343
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163279
|
Upload package tarballs
|
29343
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163280
|
Upload public static evidence
|
29343
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1789871712
|
1789872166
|
Edit
Delete
|
|
163281
|
Run actions/checkout@v4
|
29344
|
0
|
116
|
1
|
30
|
111
|
1789872171
|
1789872175
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163282
|
Enable pnpm
|
29344
|
1
|
116
|
1
|
141
|
1
|
1789872175
|
1789872175
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163283
|
Run actions/setup-node@v4
|
29344
|
2
|
116
|
1
|
142
|
16
|
1789872175
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163284
|
Private registry auth (temporary userconfig)
|
29344
|
3
|
116
|
2
|
158
|
5
|
1789872176
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163285
|
Install runtime workspace (frozen lockfile)
|
29344
|
4
|
116
|
4
|
163
|
0
|
1789872176
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163286
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
29344
|
5
|
116
|
4
|
163
|
0
|
1789872176
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163287
|
Generate Prisma clients
|
29344
|
6
|
116
|
4
|
163
|
0
|
1789872176
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163288
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
29344
|
7
|
116
|
4
|
163
|
0
|
1789872176
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163289
|
Repo-root governance gate
|
29344
|
8
|
116
|
4
|
163
|
0
|
1789872176
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163290
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
29344
|
9
|
116
|
4
|
163
|
0
|
1789872176
|
1789872176
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163291
|
Upload static evidence
|
29344
|
10
|
116
|
1
|
163
|
17
|
1789872176
|
1789872177
|
1789872166
|
1789872178
|
Edit
Delete
|
|
163292
|
Run actions/checkout@v4
|
29345
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163293
|
Enable pnpm
|
29345
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163294
|
Run actions/setup-node@v4
|
29345
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163295
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
29345
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163296
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
29345
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163297
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
29345
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163298
|
Upload package tarballs
|
29345
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163299
|
Upload public static evidence
|
29345
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872178
|
1789872291
|
Edit
Delete
|
|
163300
|
Run actions/checkout@v4
|
29346
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1789872291
|
1789872322
|
Edit
Delete
|