|
240051
|
IdP static sub-checks (independent of runtime / UI IdP static sub-checks (independent of runtime / UI reports)...
|
36544
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047501
|
1793047501
|
Edit
Delete
|
|
240052
|
IdP real DB acceptance (single NestJS host, serial IdP real DB acceptance (single NestJS host, serialized)...
|
36544
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047501
|
1793047501
|
Edit
Delete
|
|
240053
|
Install Playwright browser
|
36544
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047501
|
1793047501
|
Edit
Delete
|
|
240054
|
IdP UI acceptance (single NestJS host)
|
36544
|
13
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047501
|
1793047501
|
Edit
Delete
|
|
240055
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
36544
|
14
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047501
|
1793047501
|
Edit
Delete
|
|
240056
|
Upload identity evidence
|
36544
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047501
|
1793047501
|
Edit
Delete
|
|
240057
|
Candidate tag (real run attempt, computed per job)
|
36545
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240058
|
Run https://github.com/actions/checkout@v4
|
36545
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240059
|
Enable pnpm
|
36545
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240060
|
Run https://github.com/actions/setup-node@v4
|
36545
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240061
|
Private registry auth (temporary userconfig)
|
36545
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240062
|
Install locked governance tools
|
36545
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240063
|
Resolve npmrc for BuildKit secret (never printed)
|
36545
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240064
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
36545
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240065
|
Install syft (pinned) and generate SPDX SBOM
|
36545
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240066
|
Install cosign (pinned)
|
36545
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240067
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
36545
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240068
|
Upload image evidence
|
36545
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793047503
|
1793047503
|
Edit
Delete
|
|
240069
|
Candidate tag (real run attempt, computed per job)
|
36546
|
0
|
116
|
2
|
71
|
3
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240070
|
Run https://github.com/actions/checkout@v4
|
36546
|
1
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240071
|
Enable pnpm
|
36546
|
2
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240072
|
Run https://github.com/actions/setup-node@v4
|
36546
|
3
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240073
|
Download static evidence
|
36546
|
4
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240074
|
Download runtime evidence
|
36546
|
5
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240075
|
Download identity evidence
|
36546
|
6
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240076
|
Download port-conformance evidence
|
36546
|
7
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240077
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
36546
|
8
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240078
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
36546
|
9
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240079
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
36546
|
10
|
116
|
4
|
74
|
0
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240080
|
Upload candidate evidence
|
36546
|
11
|
116
|
2
|
74
|
5
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240081
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
36546
|
12
|
116
|
2
|
79
|
3
|
1793047516
|
1793047516
|
1793047505
|
1793047517
|
Edit
Delete
|
|
240082
|
Candidate tag (real run attempt, computed per job)
|
36547
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240083
|
Run https://github.com/actions/checkout@v4
|
36547
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240084
|
Enable pnpm
|
36547
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240085
|
Run https://github.com/actions/setup-node@v4
|
36547
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240086
|
Private registry auth (temporary userconfig)
|
36547
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240087
|
Install locked governance tools
|
36547
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240088
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
36547
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240089
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
36547
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240090
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
36547
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240091
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
36547
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240092
|
Upload package tarballs
|
36547
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240093
|
Upload public static evidence
|
36547
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793049197
|
1793050228
|
Edit
Delete
|
|
240094
|
Candidate tag (real run attempt, computed per job)
|
36548
|
0
|
116
|
5
|
0
|
0
|
0
|
0
|
1793050228
|
1793050604
|
Edit
Delete
|
|
240095
|
Run https://github.com/actions/checkout@v4
|
36548
|
1
|
116
|
5
|
0
|
0
|
0
|
0
|
1793050228
|
1793050604
|
Edit
Delete
|
|
240096
|
Enable pnpm
|
36548
|
2
|
116
|
5
|
0
|
0
|
0
|
0
|
1793050228
|
1793050604
|
Edit
Delete
|
|
240097
|
Run https://github.com/actions/setup-node@v4
|
36548
|
3
|
116
|
5
|
0
|
0
|
0
|
0
|
1793050228
|
1793050604
|
Edit
Delete
|
|
240098
|
Private registry auth (temporary userconfig)
|
36548
|
4
|
116
|
5
|
0
|
0
|
0
|
0
|
1793050228
|
1793050604
|
Edit
Delete
|
|
240099
|
Install locked governance tools
|
36548
|
5
|
116
|
5
|
0
|
0
|
0
|
0
|
1793050228
|
1793050604
|
Edit
Delete
|
|
240100
|
Install runtime workspace (frozen lockfile)
|
36548
|
6
|
116
|
5
|
0
|
0
|
0
|
0
|
1793050228
|
1793050604
|
Edit
Delete
|