|
257401
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
38069
|
14
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674279
|
1793674279
|
Edit
Delete
|
|
257402
|
Upload identity evidence
|
38069
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674279
|
1793674279
|
Edit
Delete
|
|
257403
|
Candidate tag (real run attempt, computed per job)
|
38070
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257404
|
Run https://github.com/actions/checkout@v4
|
38070
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257405
|
Enable pnpm
|
38070
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257406
|
Run https://github.com/actions/setup-node@v4
|
38070
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257407
|
Private registry auth (temporary userconfig)
|
38070
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257408
|
Install locked governance tools
|
38070
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257409
|
Resolve npmrc for BuildKit secret (never printed)
|
38070
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257410
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38070
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257411
|
Install syft (pinned) and generate SPDX SBOM
|
38070
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257412
|
Install cosign (pinned)
|
38070
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257413
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38070
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257414
|
Upload image evidence
|
38070
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793674281
|
1793674281
|
Edit
Delete
|
|
257415
|
Candidate tag (real run attempt, computed per job)
|
38071
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257416
|
Run https://github.com/actions/checkout@v4
|
38071
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257417
|
Enable pnpm
|
38071
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257418
|
Run https://github.com/actions/setup-node@v4
|
38071
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257419
|
Download static evidence
|
38071
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257420
|
Download runtime evidence
|
38071
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257421
|
Download identity evidence
|
38071
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257422
|
Download port-conformance evidence
|
38071
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257423
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38071
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257424
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38071
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257425
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38071
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257426
|
Upload candidate evidence
|
38071
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257427
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38071
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674283
|
1793674313
|
Edit
Delete
|
|
257428
|
Candidate tag (real run attempt, computed per job)
|
38072
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257429
|
Run https://github.com/actions/checkout@v4
|
38072
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257430
|
Enable pnpm
|
38072
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257431
|
Run https://github.com/actions/setup-node@v4
|
38072
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257432
|
Download static evidence
|
38072
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257433
|
Download runtime evidence
|
38072
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257434
|
Download identity evidence
|
38072
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257435
|
Download port-conformance evidence
|
38072
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257436
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38072
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257437
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38072
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257438
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38072
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257439
|
Upload candidate evidence
|
38072
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257440
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38072
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793674313
|
1793674344
|
Edit
Delete
|
|
257441
|
Candidate tag (real run attempt, computed per job)
|
38073
|
0
|
116
|
2
|
68
|
3
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257442
|
Run https://github.com/actions/checkout@v4
|
38073
|
1
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257443
|
Enable pnpm
|
38073
|
2
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257444
|
Run https://github.com/actions/setup-node@v4
|
38073
|
3
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257445
|
Download static evidence
|
38073
|
4
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257446
|
Download runtime evidence
|
38073
|
5
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257447
|
Download identity evidence
|
38073
|
6
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257448
|
Download port-conformance evidence
|
38073
|
7
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257449
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38073
|
8
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|
|
257450
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38073
|
9
|
116
|
4
|
71
|
0
|
1793674354
|
1793674354
|
1793674344
|
1793674355
|
Edit
Delete
|