|
270651
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39074
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794200067
|
1794200067
|
Edit
Delete
|
|
270652
|
Install syft (pinned) and generate SPDX SBOM
|
39074
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794200067
|
1794200067
|
Edit
Delete
|
|
270653
|
Install cosign (pinned)
|
39074
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794200067
|
1794200067
|
Edit
Delete
|
|
270654
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39074
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794200067
|
1794200067
|
Edit
Delete
|
|
270655
|
Upload image evidence
|
39074
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794200067
|
1794200067
|
Edit
Delete
|
|
270656
|
Candidate tag (real run attempt, computed per job)
|
39075
|
0
|
116
|
2
|
70
|
3
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270657
|
Run https://github.com/actions/checkout@v4
|
39075
|
1
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270658
|
Enable pnpm
|
39075
|
2
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270659
|
Run https://github.com/actions/setup-node@v4
|
39075
|
3
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270660
|
Download static evidence
|
39075
|
4
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270661
|
Download runtime evidence
|
39075
|
5
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270662
|
Download identity evidence
|
39075
|
6
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270663
|
Download port-conformance evidence
|
39075
|
7
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270664
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39075
|
8
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270665
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39075
|
9
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270666
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39075
|
10
|
116
|
4
|
73
|
0
|
1794200076
|
1794200076
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270667
|
Upload candidate evidence
|
39075
|
11
|
116
|
2
|
73
|
7
|
1794200076
|
1794200077
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270668
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
39075
|
12
|
116
|
2
|
80
|
3
|
1794200077
|
1794200077
|
1794200069
|
1794200077
|
Edit
Delete
|
|
270669
|
Validate fixed reviewed inputs in private resource Validate fixed reviewed inputs in private resource limited units...
|
39076
|
0
|
116
|
1
|
8
|
1
|
1794200119
|
1794200144
|
1794200119
|
1794200144
|
Edit
Delete
|
|
270670
|
Candidate tag (real run attempt, computed per job)
|
39077
|
0
|
116
|
2
|
23
|
3
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270671
|
Run https://github.com/actions/checkout@v4
|
39077
|
1
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270672
|
Enable pnpm
|
39077
|
2
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270673
|
Run https://github.com/actions/setup-node@v4
|
39077
|
3
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270674
|
Private registry auth (temporary userconfig)
|
39077
|
4
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270675
|
Install locked governance tools
|
39077
|
5
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270676
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39077
|
6
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270677
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39077
|
7
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270678
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39077
|
8
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270679
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
39077
|
9
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270680
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
39077
|
10
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270681
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39077
|
11
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270682
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39077
|
12
|
116
|
4
|
26
|
0
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270683
|
Upload package tarballs
|
39077
|
13
|
116
|
2
|
26
|
3
|
1794200579
|
1794200579
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270684
|
Upload public static evidence
|
39077
|
14
|
116
|
1
|
29
|
1
|
1794200579
|
1794200580
|
1794200576
|
1794200580
|
Edit
Delete
|
|
270685
|
Candidate tag (real run attempt, computed per job)
|
39078
|
0
|
116
|
2
|
20
|
3
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270686
|
Run https://github.com/actions/checkout@v4
|
39078
|
1
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270687
|
Enable pnpm
|
39078
|
2
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270688
|
Run https://github.com/actions/setup-node@v4
|
39078
|
3
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270689
|
Private registry auth (temporary userconfig)
|
39078
|
4
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270690
|
Install locked governance tools
|
39078
|
5
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270691
|
Install runtime workspace (frozen lockfile)
|
39078
|
6
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270692
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39078
|
7
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270693
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39078
|
8
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270694
|
Generate Prisma clients
|
39078
|
9
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270695
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
39078
|
10
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270696
|
Repo-root governance gate
|
39078
|
11
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270697
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
39078
|
12
|
116
|
4
|
23
|
0
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270698
|
Upload static evidence
|
39078
|
13
|
116
|
1
|
23
|
3
|
1794200583
|
1794200583
|
1794200580
|
1794200583
|
Edit
Delete
|
|
270699
|
Run https://github.com/actions/checkout@v4
|
39079
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794200585
|
1794200586
|
Edit
Delete
|
|
270700
|
Enable pnpm
|
39079
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794200585
|
1794200586
|
Edit
Delete
|