|
248001
|
Run https://github.com/actions/checkout@v4
|
37228
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248002
|
Enable pnpm
|
37228
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248003
|
Run https://github.com/actions/setup-node@v4
|
37228
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248004
|
Private registry auth (temporary userconfig)
|
37228
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248005
|
Install locked governance tools
|
37228
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248006
|
Resolve npmrc for BuildKit secret (never printed)
|
37228
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248007
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
37228
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248008
|
Install syft (pinned) and generate SPDX SBOM
|
37228
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248009
|
Install cosign (pinned)
|
37228
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248010
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
37228
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248011
|
Upload image evidence
|
37228
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793426231
|
1793426232
|
Edit
Delete
|
|
248012
|
Candidate tag (real run attempt, computed per job)
|
37229
|
0
|
116
|
2
|
68
|
3
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248013
|
Run https://github.com/actions/checkout@v4
|
37229
|
1
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248014
|
Enable pnpm
|
37229
|
2
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248015
|
Run https://github.com/actions/setup-node@v4
|
37229
|
3
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248016
|
Download static evidence
|
37229
|
4
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248017
|
Download runtime evidence
|
37229
|
5
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248018
|
Download identity evidence
|
37229
|
6
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248019
|
Download port-conformance evidence
|
37229
|
7
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248020
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
37229
|
8
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248021
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
37229
|
9
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248022
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
37229
|
10
|
116
|
4
|
71
|
0
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248023
|
Upload candidate evidence
|
37229
|
11
|
116
|
2
|
71
|
5
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248024
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
37229
|
12
|
116
|
2
|
76
|
3
|
1793426242
|
1793426242
|
1793426233
|
1793426243
|
Edit
Delete
|
|
248025
|
Candidate tag (real run attempt, computed per job)
|
37230
|
0
|
116
|
2
|
68
|
3
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248026
|
Run https://github.com/actions/checkout@v4
|
37230
|
1
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248027
|
Enable pnpm
|
37230
|
2
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248028
|
Run https://github.com/actions/setup-node@v4
|
37230
|
3
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248029
|
Download static evidence
|
37230
|
4
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248030
|
Download runtime evidence
|
37230
|
5
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248031
|
Download identity evidence
|
37230
|
6
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248032
|
Download port-conformance evidence
|
37230
|
7
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248033
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
37230
|
8
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248034
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
37230
|
9
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248035
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
37230
|
10
|
116
|
4
|
71
|
0
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248036
|
Upload candidate evidence
|
37230
|
11
|
116
|
2
|
71
|
5
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|
|
248037
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
37230
|
12
|
116
|
2
|
76
|
3
|
1793426252
|
1793426252
|
1793426243
|
1793426252
|
Edit
Delete
|