|
195151
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
32677
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719656
|
1791719656
|
Edit
Delete
|
|
195152
|
Upload identity evidence
|
32677
|
13
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719656
|
1791719656
|
Edit
Delete
|
|
195153
|
Run actions/checkout@v4
|
32678
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195154
|
Enable pnpm
|
32678
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195155
|
Run actions/setup-node@v4
|
32678
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195156
|
Private registry auth (temporary userconfig)
|
32678
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195157
|
Resolve npmrc for BuildKit secret (never printed)
|
32678
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195158
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
32678
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195159
|
Install syft (pinned) and generate SPDX SBOM
|
32678
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195160
|
Install cosign (pinned)
|
32678
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195161
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
32678
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195162
|
Upload image evidence
|
32678
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1791719658
|
1791719658
|
Edit
Delete
|
|
195163
|
Run actions/checkout@v4
|
32679
|
0
|
116
|
1
|
73
|
118
|
1791719667
|
1791719673
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195164
|
Enable pnpm
|
32679
|
1
|
116
|
1
|
191
|
1
|
1791719673
|
1791719673
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195165
|
Run actions/setup-node@v4
|
32679
|
2
|
116
|
1
|
192
|
13
|
1791719673
|
1791719674
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195166
|
Download static evidence
|
32679
|
3
|
116
|
1
|
205
|
5
|
1791719674
|
1791719674
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195167
|
Download runtime evidence
|
32679
|
4
|
116
|
2
|
210
|
3
|
1791719674
|
1791719675
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195168
|
Download identity evidence
|
32679
|
5
|
116
|
2
|
213
|
3
|
1791719675
|
1791719675
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195169
|
Download port-conformance evidence
|
32679
|
6
|
116
|
2
|
216
|
3
|
1791719675
|
1791719675
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195170
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
32679
|
7
|
116
|
2
|
219
|
19
|
1791719675
|
1791719675
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195171
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
32679
|
8
|
116
|
2
|
238
|
4
|
1791719675
|
1791719675
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195172
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
32679
|
9
|
116
|
4
|
242
|
0
|
1791719675
|
1791719675
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195173
|
Upload candidate evidence
|
32679
|
10
|
116
|
1
|
242
|
17
|
1791719675
|
1791719675
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195174
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
32679
|
11
|
116
|
2
|
259
|
3
|
1791719675
|
1791719676
|
1791719660
|
1791719676
|
Edit
Delete
|
|
195175
|
Run actions/checkout@v4
|
32680
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195176
|
Enable pnpm
|
32680
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195177
|
Run actions/setup-node@v4
|
32680
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195178
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
32680
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195179
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
32680
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195180
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
32680
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195181
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
32680
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195182
|
Upload package tarballs
|
32680
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195183
|
Upload public static evidence
|
32680
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1791720925
|
1791721346
|
Edit
Delete
|
|
195184
|
Run actions/checkout@v4
|
32681
|
0
|
116
|
1
|
30
|
121
|
1791721351
|
1791721357
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195185
|
Enable pnpm
|
32681
|
1
|
116
|
1
|
151
|
1
|
1791721357
|
1791721357
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195186
|
Run actions/setup-node@v4
|
32681
|
2
|
116
|
1
|
152
|
16
|
1791721357
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195187
|
Private registry auth (temporary userconfig)
|
32681
|
3
|
116
|
2
|
168
|
5
|
1791721359
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195188
|
Install runtime workspace (frozen lockfile)
|
32681
|
4
|
116
|
4
|
173
|
0
|
1791721359
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195189
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
32681
|
5
|
116
|
4
|
173
|
0
|
1791721359
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195190
|
Generate Prisma clients
|
32681
|
6
|
116
|
4
|
173
|
0
|
1791721359
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195191
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
32681
|
7
|
116
|
4
|
173
|
0
|
1791721359
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195192
|
Repo-root governance gate
|
32681
|
8
|
116
|
4
|
173
|
0
|
1791721359
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195193
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
32681
|
9
|
116
|
4
|
173
|
0
|
1791721359
|
1791721359
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195194
|
Upload static evidence
|
32681
|
10
|
116
|
1
|
173
|
17
|
1791721359
|
1791721360
|
1791721346
|
1791721361
|
Edit
Delete
|
|
195195
|
Checkout
|
32682
|
0
|
57
|
1
|
24
|
57
|
1791721365
|
1791721376
|
1791721361
|
1791721404
|
Edit
Delete
|
|
195196
|
Setup Node.js
|
32682
|
1
|
57
|
1
|
81
|
15
|
1791721376
|
1791721377
|
1791721361
|
1791721404
|
Edit
Delete
|
|
195197
|
Enable pnpm
|
32682
|
2
|
57
|
1
|
96
|
1
|
1791721377
|
1791721377
|
1791721361
|
1791721404
|
Edit
Delete
|
|
195198
|
Install dependencies
|
32682
|
3
|
57
|
1
|
97
|
21
|
1791721377
|
1791721384
|
1791721361
|
1791721404
|
Edit
Delete
|
|
195199
|
Generate Prisma clients
|
32682
|
4
|
57
|
1
|
118
|
45
|
1791721384
|
1791721391
|
1791721361
|
1791721404
|
Edit
Delete
|
|
195200
|
Run static governance gate
|
32682
|
5
|
57
|
2
|
163
|
88
|
1791721391
|
1791721403
|
1791721361
|
1791721404
|
Edit
Delete
|