|
258301
|
Resolve npmrc for BuildKit secret (never printed)
|
38138
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793694618
|
1793694618
|
Edit
Delete
|
|
258302
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38138
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793694618
|
1793694618
|
Edit
Delete
|
|
258303
|
Install syft (pinned) and generate SPDX SBOM
|
38138
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793694618
|
1793694618
|
Edit
Delete
|
|
258304
|
Install cosign (pinned)
|
38138
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793694618
|
1793694618
|
Edit
Delete
|
|
258305
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38138
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793694618
|
1793694618
|
Edit
Delete
|
|
258306
|
Upload image evidence
|
38138
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793694618
|
1793694618
|
Edit
Delete
|
|
258307
|
Candidate tag (real run attempt, computed per job)
|
38139
|
0
|
116
|
2
|
68
|
3
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258308
|
Run https://github.com/actions/checkout@v4
|
38139
|
1
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258309
|
Enable pnpm
|
38139
|
2
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258310
|
Run https://github.com/actions/setup-node@v4
|
38139
|
3
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258311
|
Download static evidence
|
38139
|
4
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258312
|
Download runtime evidence
|
38139
|
5
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258313
|
Download identity evidence
|
38139
|
6
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258314
|
Download port-conformance evidence
|
38139
|
7
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258315
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38139
|
8
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258316
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38139
|
9
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258317
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38139
|
10
|
116
|
4
|
71
|
0
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258318
|
Upload candidate evidence
|
38139
|
11
|
116
|
2
|
71
|
5
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258319
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38139
|
12
|
116
|
2
|
76
|
3
|
1793694630
|
1793694630
|
1793694621
|
1793694631
|
Edit
Delete
|
|
258320
|
Checkout
|
38140
|
0
|
72
|
1
|
24
|
72
|
1793695341
|
1793695344
|
1793695337
|
1793695480
|
Edit
Delete
|
|
258321
|
Setup Node.js
|
38140
|
1
|
72
|
1
|
96
|
13
|
1793695344
|
1793695345
|
1793695337
|
1793695480
|
Edit
Delete
|
|
258322
|
Enable pnpm
|
38140
|
2
|
72
|
1
|
109
|
1
|
1793695345
|
1793695345
|
1793695337
|
1793695480
|
Edit
Delete
|
|
258323
|
Install dependencies
|
38140
|
3
|
72
|
1
|
110
|
18
|
1793695345
|
1793695354
|
1793695337
|
1793695480
|
Edit
Delete
|
|
258324
|
Generate Prisma clients
|
38140
|
4
|
72
|
1
|
128
|
16
|
1793695354
|
1793695358
|
1793695337
|
1793695480
|
Edit
Delete
|
|
258325
|
Run static governance gate
|
38140
|
5
|
72
|
1
|
144
|
385
|
1793695358
|
1793695478
|
1793695337
|
1793695480
|
Edit
Delete
|
|
258326
|
Checkout
|
38141
|
0
|
72
|
1
|
31
|
72
|
1793695487
|
1793695490
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258327
|
Setup Node.js
|
38141
|
1
|
72
|
1
|
103
|
13
|
1793695490
|
1793695491
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258328
|
Enable pnpm
|
38141
|
2
|
72
|
1
|
116
|
1
|
1793695491
|
1793695491
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258329
|
Install dependencies
|
38141
|
3
|
72
|
1
|
117
|
18
|
1793695491
|
1793695500
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258330
|
Generate Prisma clients
|
38141
|
4
|
72
|
1
|
135
|
16
|
1793695500
|
1793695505
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258331
|
Start object storage (MinIO)
|
38141
|
5
|
72
|
2
|
151
|
5
|
1793695505
|
1793695505
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258332
|
Start real ClamAV scanner
|
38141
|
6
|
72
|
4
|
156
|
0
|
1793695505
|
1793695505
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258333
|
Run real DB and Redis acceptance
|
38141
|
7
|
72
|
4
|
156
|
0
|
1793695505
|
1793695505
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258334
|
Install Playwright browser
|
38141
|
8
|
72
|
4
|
156
|
0
|
1793695505
|
1793695505
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258335
|
Run UI acceptance
|
38141
|
9
|
72
|
4
|
156
|
0
|
1793695505
|
1793695505
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258336
|
Upload acceptance evidence
|
38141
|
10
|
72
|
2
|
156
|
7
|
1793695505
|
1793695506
|
1793695482
|
1793695507
|
Edit
Delete
|
|
258337
|
Candidate tag (real run attempt, computed per job)
|
38142
|
0
|
116
|
2
|
23
|
3
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258338
|
Run https://github.com/actions/checkout@v4
|
38142
|
1
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258339
|
Enable pnpm
|
38142
|
2
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258340
|
Run https://github.com/actions/setup-node@v4
|
38142
|
3
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258341
|
Private registry auth (temporary userconfig)
|
38142
|
4
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258342
|
Install locked governance tools
|
38142
|
5
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258343
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38142
|
6
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258344
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38142
|
7
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258345
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38142
|
8
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258346
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38142
|
9
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258347
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38142
|
10
|
116
|
4
|
26
|
0
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258348
|
Upload package tarballs
|
38142
|
11
|
116
|
2
|
26
|
3
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258349
|
Upload public static evidence
|
38142
|
12
|
116
|
1
|
29
|
1
|
1793696455
|
1793696455
|
1793696451
|
1793696455
|
Edit
Delete
|
|
258350
|
Candidate tag (real run attempt, computed per job)
|
38143
|
0
|
116
|
2
|
20
|
3
|
1793696458
|
1793696458
|
1793696455
|
1793696458
|
Edit
Delete
|