|
264251
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
38593
|
14
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888911
|
1793888911
|
Edit
Delete
|
|
264252
|
Upload identity evidence
|
38593
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888911
|
1793888911
|
Edit
Delete
|
|
264253
|
Candidate tag (real run attempt, computed per job)
|
38594
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264254
|
Run https://github.com/actions/checkout@v4
|
38594
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264255
|
Enable pnpm
|
38594
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264256
|
Run https://github.com/actions/setup-node@v4
|
38594
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264257
|
Private registry auth (temporary userconfig)
|
38594
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264258
|
Install locked governance tools
|
38594
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264259
|
Resolve npmrc for BuildKit secret (never printed)
|
38594
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264260
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38594
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264261
|
Install syft (pinned) and generate SPDX SBOM
|
38594
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264262
|
Install cosign (pinned)
|
38594
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264263
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38594
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264264
|
Upload image evidence
|
38594
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793888913
|
1793888913
|
Edit
Delete
|
|
264265
|
Candidate tag (real run attempt, computed per job)
|
38595
|
0
|
116
|
2
|
68
|
3
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264266
|
Run https://github.com/actions/checkout@v4
|
38595
|
1
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264267
|
Enable pnpm
|
38595
|
2
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264268
|
Run https://github.com/actions/setup-node@v4
|
38595
|
3
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264269
|
Download static evidence
|
38595
|
4
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264270
|
Download runtime evidence
|
38595
|
5
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264271
|
Download identity evidence
|
38595
|
6
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264272
|
Download port-conformance evidence
|
38595
|
7
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264273
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38595
|
8
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264274
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38595
|
9
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264275
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38595
|
10
|
116
|
4
|
71
|
0
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264276
|
Upload candidate evidence
|
38595
|
11
|
116
|
2
|
71
|
5
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264277
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38595
|
12
|
116
|
2
|
76
|
3
|
1793888933
|
1793888933
|
1793888915
|
1793888934
|
Edit
Delete
|
|
264278
|
Candidate tag (real run attempt, computed per job)
|
38596
|
0
|
116
|
2
|
23
|
3
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264279
|
Run https://github.com/actions/checkout@v4
|
38596
|
1
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264280
|
Enable pnpm
|
38596
|
2
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264281
|
Run https://github.com/actions/setup-node@v4
|
38596
|
3
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264282
|
Private registry auth (temporary userconfig)
|
38596
|
4
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264283
|
Install locked governance tools
|
38596
|
5
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264284
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38596
|
6
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264285
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38596
|
7
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264286
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38596
|
8
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264287
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38596
|
9
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264288
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38596
|
10
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264289
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38596
|
11
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264290
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38596
|
12
|
116
|
4
|
26
|
0
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264291
|
Upload package tarballs
|
38596
|
13
|
116
|
2
|
26
|
3
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264292
|
Upload public static evidence
|
38596
|
14
|
116
|
1
|
29
|
1
|
1793889000
|
1793889000
|
1793888996
|
1793889000
|
Edit
Delete
|
|
264293
|
Candidate tag (real run attempt, computed per job)
|
38597
|
0
|
116
|
2
|
20
|
3
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|
|
264294
|
Run https://github.com/actions/checkout@v4
|
38597
|
1
|
116
|
4
|
23
|
0
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|
|
264295
|
Enable pnpm
|
38597
|
2
|
116
|
4
|
23
|
0
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|
|
264296
|
Run https://github.com/actions/setup-node@v4
|
38597
|
3
|
116
|
4
|
23
|
0
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|
|
264297
|
Private registry auth (temporary userconfig)
|
38597
|
4
|
116
|
4
|
23
|
0
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|
|
264298
|
Install locked governance tools
|
38597
|
5
|
116
|
4
|
23
|
0
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|
|
264299
|
Install runtime workspace (frozen lockfile)
|
38597
|
6
|
116
|
4
|
23
|
0
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|
|
264300
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38597
|
7
|
116
|
4
|
23
|
0
|
1793889004
|
1793889004
|
1793889000
|
1793889004
|
Edit
Delete
|