|
251701
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
37514
|
14
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522143
|
1793522143
|
Edit
Delete
|
|
251702
|
Upload identity evidence
|
37514
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522143
|
1793522143
|
Edit
Delete
|
|
251703
|
Candidate tag (real run attempt, computed per job)
|
37515
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251704
|
Run https://github.com/actions/checkout@v4
|
37515
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251705
|
Enable pnpm
|
37515
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251706
|
Run https://github.com/actions/setup-node@v4
|
37515
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251707
|
Private registry auth (temporary userconfig)
|
37515
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251708
|
Install locked governance tools
|
37515
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251709
|
Resolve npmrc for BuildKit secret (never printed)
|
37515
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251710
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
37515
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251711
|
Install syft (pinned) and generate SPDX SBOM
|
37515
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251712
|
Install cosign (pinned)
|
37515
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251713
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
37515
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251714
|
Upload image evidence
|
37515
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793522145
|
1793522146
|
Edit
Delete
|
|
251715
|
Candidate tag (real run attempt, computed per job)
|
37516
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251716
|
Run https://github.com/actions/checkout@v4
|
37516
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251717
|
Enable pnpm
|
37516
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251718
|
Run https://github.com/actions/setup-node@v4
|
37516
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251719
|
Download static evidence
|
37516
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251720
|
Download runtime evidence
|
37516
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251721
|
Download identity evidence
|
37516
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251722
|
Download port-conformance evidence
|
37516
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251723
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
37516
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251724
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
37516
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251725
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
37516
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251726
|
Upload candidate evidence
|
37516
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251727
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
37516
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522147
|
1793522195
|
Edit
Delete
|
|
251728
|
Preserve reproduced baseline and prepare isolated Preserve reproduced baseline and prepare isolated compatibility analysis...
|
37517
|
0
|
116
|
2
|
8
|
8
|
1793522195
|
1793522514
|
1793522195
|
1793522514
|
Edit
Delete
|
|
251729
|
Candidate tag (real run attempt, computed per job)
|
37518
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251730
|
Run https://github.com/actions/checkout@v4
|
37518
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251731
|
Enable pnpm
|
37518
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251732
|
Run https://github.com/actions/setup-node@v4
|
37518
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251733
|
Private registry auth (temporary userconfig)
|
37518
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251734
|
Install locked governance tools
|
37518
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251735
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
37518
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251736
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
37518
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251737
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
37518
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251738
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
37518
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251739
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
37518
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251740
|
Upload package tarballs
|
37518
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251741
|
Upload public static evidence
|
37518
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522514
|
1793522605
|
Edit
Delete
|
|
251742
|
Candidate tag (real run attempt, computed per job)
|
37519
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251743
|
Run https://github.com/actions/checkout@v4
|
37519
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251744
|
Enable pnpm
|
37519
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251745
|
Run https://github.com/actions/setup-node@v4
|
37519
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251746
|
Private registry auth (temporary userconfig)
|
37519
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251747
|
Install locked governance tools
|
37519
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251748
|
Install runtime workspace (frozen lockfile)
|
37519
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251749
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
37519
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|
|
251750
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
37519
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793522605
|
1793522902
|
Edit
Delete
|