|
269201
|
Install locked governance tools
|
38963
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794147863
|
1794147863
|
Edit
Delete
|
|
269202
|
Resolve npmrc for BuildKit secret (never printed)
|
38963
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794147863
|
1794147863
|
Edit
Delete
|
|
269203
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38963
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794147863
|
1794147863
|
Edit
Delete
|
|
269204
|
Install syft (pinned) and generate SPDX SBOM
|
38963
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794147863
|
1794147863
|
Edit
Delete
|
|
269205
|
Install cosign (pinned)
|
38963
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794147863
|
1794147863
|
Edit
Delete
|
|
269206
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38963
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794147863
|
1794147863
|
Edit
Delete
|
|
269207
|
Upload image evidence
|
38963
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794147863
|
1794147863
|
Edit
Delete
|
|
269208
|
Checkout
|
38964
|
0
|
76
|
1
|
37
|
70
|
1794147866
|
1794147870
|
1794147865
|
1794147871
|
Edit
Delete
|
|
269209
|
Require every governance and scan result
|
38964
|
1
|
76
|
2
|
107
|
3
|
1794147870
|
1794147870
|
1794147865
|
1794147871
|
Edit
Delete
|
|
269210
|
Require completed pins and fixture checks
|
38965
|
0
|
76
|
2
|
15
|
2
|
1794147871
|
1794147871
|
1794147871
|
1794147871
|
Edit
Delete
|
|
269211
|
Candidate tag (real run attempt, computed per job)
|
38966
|
0
|
116
|
2
|
63
|
3
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269212
|
Run https://github.com/actions/checkout@v4
|
38966
|
1
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269213
|
Enable pnpm
|
38966
|
2
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269214
|
Run https://github.com/actions/setup-node@v4
|
38966
|
3
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269215
|
Download static evidence
|
38966
|
4
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269216
|
Download runtime evidence
|
38966
|
5
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269217
|
Download identity evidence
|
38966
|
6
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269218
|
Download port-conformance evidence
|
38966
|
7
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269219
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38966
|
8
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269220
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38966
|
9
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269221
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38966
|
10
|
116
|
4
|
66
|
0
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269222
|
Upload candidate evidence
|
38966
|
11
|
116
|
2
|
66
|
5
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269223
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38966
|
12
|
116
|
2
|
71
|
3
|
1794147879
|
1794147879
|
1794147873
|
1794147880
|
Edit
Delete
|
|
269224
|
Candidate tag (real run attempt, computed per job)
|
38967
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269225
|
Run https://github.com/actions/checkout@v4
|
38967
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269226
|
Enable pnpm
|
38967
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269227
|
Run https://github.com/actions/setup-node@v4
|
38967
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269228
|
Private registry auth (temporary userconfig)
|
38967
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269229
|
Install locked governance tools
|
38967
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269230
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38967
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269231
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38967
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269232
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38967
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269233
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38967
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269234
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38967
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269235
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38967
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269236
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38967
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269237
|
Upload package tarballs
|
38967
|
13
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269238
|
Upload public static evidence
|
38967
|
14
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149517
|
1794149607
|
Edit
Delete
|
|
269239
|
Candidate tag (real run attempt, computed per job)
|
38968
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269240
|
Run https://github.com/actions/checkout@v4
|
38968
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269241
|
Enable pnpm
|
38968
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269242
|
Run https://github.com/actions/setup-node@v4
|
38968
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269243
|
Private registry auth (temporary userconfig)
|
38968
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269244
|
Install locked governance tools
|
38968
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269245
|
Install runtime workspace (frozen lockfile)
|
38968
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269246
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38968
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269247
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38968
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269248
|
Generate Prisma clients
|
38968
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269249
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38968
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|
|
269250
|
Repo-root governance gate
|
38968
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1794149608
|
1794149638
|
Edit
Delete
|