|
201101
|
Enable pnpm
|
33209
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201102
|
Run actions/setup-node@v4
|
33209
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201103
|
Private registry auth (temporary userconfig)
|
33209
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201104
|
Resolve npmrc for BuildKit secret (never printed)
|
33209
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201105
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
33209
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201106
|
Install syft (pinned) and generate SPDX SBOM
|
33209
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201107
|
Install cosign (pinned)
|
33209
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201108
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
33209
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201109
|
Upload image evidence
|
33209
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1791843678
|
1791843678
|
Edit
Delete
|
|
201110
|
Run actions/checkout@v4
|
33210
|
0
|
116
|
1
|
73
|
118
|
1791843687
|
1791843692
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201111
|
Enable pnpm
|
33210
|
1
|
116
|
1
|
191
|
1
|
1791843692
|
1791843692
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201112
|
Run actions/setup-node@v4
|
33210
|
2
|
116
|
1
|
192
|
13
|
1791843692
|
1791843693
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201113
|
Download static evidence
|
33210
|
3
|
116
|
1
|
205
|
5
|
1791843693
|
1791843693
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201114
|
Download runtime evidence
|
33210
|
4
|
116
|
2
|
210
|
3
|
1791843693
|
1791843693
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201115
|
Download identity evidence
|
33210
|
5
|
116
|
2
|
213
|
3
|
1791843693
|
1791843693
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201116
|
Download port-conformance evidence
|
33210
|
6
|
116
|
2
|
216
|
3
|
1791843693
|
1791843694
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201117
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
33210
|
7
|
116
|
2
|
219
|
22
|
1791843694
|
1791843694
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201118
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
33210
|
8
|
116
|
2
|
241
|
4
|
1791843694
|
1791843694
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201119
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
33210
|
9
|
116
|
4
|
245
|
0
|
1791843694
|
1791843694
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201120
|
Upload candidate evidence
|
33210
|
10
|
116
|
1
|
245
|
17
|
1791843694
|
1791843694
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201121
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
33210
|
11
|
116
|
2
|
262
|
3
|
1791843694
|
1791843694
|
1791843680
|
1791843695
|
Edit
Delete
|
|
201122
|
Run actions/checkout@v4
|
33211
|
0
|
117
|
1
|
27
|
56
|
1791843916
|
1791843917
|
1791843911
|
1791843928
|
Edit
Delete
|
|
201123
|
Enable pnpm
|
33211
|
1
|
117
|
1
|
83
|
1
|
1791843917
|
1791843917
|
1791843911
|
1791843928
|
Edit
Delete
|
|
201124
|
Run actions/setup-node@v4
|
33211
|
2
|
117
|
1
|
84
|
11
|
1791843917
|
1791843918
|
1791843911
|
1791843928
|
Edit
Delete
|
|
201125
|
Governance tests
|
33211
|
3
|
117
|
2
|
95
|
1260
|
1791843918
|
1791843923
|
1791843911
|
1791843928
|
Edit
Delete
|
|
201126
|
Governance gates (all gates run to completion; not Governance gates (all gates run to completion; not blocking yet)...
|
33211
|
4
|
117
|
2
|
1355
|
23
|
1791843923
|
1791843926
|
1791843911
|
1791843928
|
Edit
Delete
|
|
201127
|
Tracked-secrets gate (root scope; the only gate wh Tracked-secrets gate (root scope; the only gate whose CI result is meaningful without nested repos)...
|
33211
|
5
|
117
|
2
|
1378
|
5
|
1791843926
|
1791843927
|
1791843911
|
1791843928
|
Edit
Delete
|
|
201128
|
Run actions/checkout@v4
|
33212
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201129
|
Enable pnpm
|
33212
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201130
|
Run actions/setup-node@v4
|
33212
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201131
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
33212
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201132
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
33212
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201133
|
Governance checks (no private packages; contracts Governance checks (no private packages; contracts deps from public npm)...
|
33212
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201134
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
33212
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201135
|
Upload package tarballs
|
33212
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201136
|
Upload public static evidence
|
33212
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844168
|
1791844258
|
Edit
Delete
|
|
201137
|
Run actions/checkout@v4
|
33213
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201138
|
Enable pnpm
|
33213
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201139
|
Run actions/setup-node@v4
|
33213
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201140
|
Private registry auth (temporary userconfig)
|
33213
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201141
|
Install runtime workspace (frozen lockfile)
|
33213
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201142
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
33213
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201143
|
Generate Prisma clients
|
33213
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201144
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
33213
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201145
|
Repo-root governance gate
|
33213
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201146
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
33213
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201147
|
Upload static evidence
|
33213
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1791844258
|
1791844319
|
Edit
Delete
|
|
201148
|
Run actions/checkout@v4
|
33214
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1791844319
|
1791844320
|
Edit
Delete
|
|
201149
|
Enable pnpm
|
33214
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1791844319
|
1791844320
|
Edit
Delete
|
|
201150
|
Run actions/setup-node@v4
|
33214
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1791844319
|
1791844320
|
Edit
Delete
|