|
249051
|
Run https://github.com/actions/checkout@v4
|
37308
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249052
|
Enable pnpm
|
37308
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249053
|
Run https://github.com/actions/setup-node@v4
|
37308
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249054
|
Private registry auth (temporary userconfig)
|
37308
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249055
|
Install locked governance tools
|
37308
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249056
|
Resolve npmrc for BuildKit secret (never printed)
|
37308
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249057
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
37308
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249058
|
Install syft (pinned) and generate SPDX SBOM
|
37308
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249059
|
Install cosign (pinned)
|
37308
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249060
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
37308
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249061
|
Upload image evidence
|
37308
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793462762
|
1793462763
|
Edit
Delete
|
|
249062
|
Candidate tag (real run attempt, computed per job)
|
37309
|
0
|
116
|
2
|
68
|
3
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249063
|
Run https://github.com/actions/checkout@v4
|
37309
|
1
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249064
|
Enable pnpm
|
37309
|
2
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249065
|
Run https://github.com/actions/setup-node@v4
|
37309
|
3
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249066
|
Download static evidence
|
37309
|
4
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249067
|
Download runtime evidence
|
37309
|
5
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249068
|
Download identity evidence
|
37309
|
6
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249069
|
Download port-conformance evidence
|
37309
|
7
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249070
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
37309
|
8
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249071
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
37309
|
9
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249072
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
37309
|
10
|
116
|
4
|
71
|
0
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249073
|
Upload candidate evidence
|
37309
|
11
|
116
|
2
|
71
|
5
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249074
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
37309
|
12
|
116
|
2
|
76
|
3
|
1793462774
|
1793462774
|
1793462764
|
1793462774
|
Edit
Delete
|
|
249075
|
Candidate tag (real run attempt, computed per job)
|
37310
|
0
|
116
|
2
|
68
|
3
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249076
|
Run https://github.com/actions/checkout@v4
|
37310
|
1
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249077
|
Enable pnpm
|
37310
|
2
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249078
|
Run https://github.com/actions/setup-node@v4
|
37310
|
3
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249079
|
Download static evidence
|
37310
|
4
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249080
|
Download runtime evidence
|
37310
|
5
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249081
|
Download identity evidence
|
37310
|
6
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249082
|
Download port-conformance evidence
|
37310
|
7
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249083
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
37310
|
8
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249084
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
37310
|
9
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249085
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
37310
|
10
|
116
|
4
|
71
|
0
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249086
|
Upload candidate evidence
|
37310
|
11
|
116
|
2
|
71
|
5
|
1793462783
|
1793462783
|
1793462774
|
1793462784
|
Edit
Delete
|
|
249087
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
37310
|
12
|
116
|
2
|
76
|
3
|
1793462783
|
1793462784
|
1793462774
|
1793462784
|
Edit
Delete
|