|
259251
|
IdP static sub-checks (independent of runtime / UI IdP static sub-checks (independent of runtime / UI reports)...
|
38209
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709365
|
1793709365
|
Edit
Delete
|
|
259252
|
IdP real DB acceptance (single NestJS host, serial IdP real DB acceptance (single NestJS host, serialized)...
|
38209
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709365
|
1793709365
|
Edit
Delete
|
|
259253
|
Install Playwright browser
|
38209
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709365
|
1793709365
|
Edit
Delete
|
|
259254
|
IdP UI acceptance (single NestJS host)
|
38209
|
13
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709365
|
1793709365
|
Edit
Delete
|
|
259255
|
IdP final governance aggregation (same checkout, f IdP final governance aggregation (same checkout, fresh runtime / UI reports)...
|
38209
|
14
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709365
|
1793709365
|
Edit
Delete
|
|
259256
|
Upload identity evidence
|
38209
|
15
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709365
|
1793709365
|
Edit
Delete
|
|
259257
|
Candidate tag (real run attempt, computed per job)
|
38210
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259258
|
Run https://github.com/actions/checkout@v4
|
38210
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259259
|
Enable pnpm
|
38210
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259260
|
Run https://github.com/actions/setup-node@v4
|
38210
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259261
|
Private registry auth (temporary userconfig)
|
38210
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259262
|
Install locked governance tools
|
38210
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259263
|
Resolve npmrc for BuildKit secret (never printed)
|
38210
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259264
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38210
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259265
|
Install syft (pinned) and generate SPDX SBOM
|
38210
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259266
|
Install cosign (pinned)
|
38210
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259267
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38210
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259268
|
Upload image evidence
|
38210
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793709367
|
1793709367
|
Edit
Delete
|
|
259269
|
Candidate tag (real run attempt, computed per job)
|
38211
|
0
|
116
|
2
|
68
|
3
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259270
|
Run https://github.com/actions/checkout@v4
|
38211
|
1
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259271
|
Enable pnpm
|
38211
|
2
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259272
|
Run https://github.com/actions/setup-node@v4
|
38211
|
3
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259273
|
Download static evidence
|
38211
|
4
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259274
|
Download runtime evidence
|
38211
|
5
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259275
|
Download identity evidence
|
38211
|
6
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259276
|
Download port-conformance evidence
|
38211
|
7
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259277
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38211
|
8
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259278
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38211
|
9
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259279
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38211
|
10
|
116
|
4
|
71
|
0
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259280
|
Upload candidate evidence
|
38211
|
11
|
116
|
2
|
71
|
5
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259281
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38211
|
12
|
116
|
2
|
76
|
3
|
1793709378
|
1793709378
|
1793709369
|
1793709379
|
Edit
Delete
|
|
259282
|
Candidate tag (real run attempt, computed per job)
|
38212
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259283
|
Run https://github.com/actions/checkout@v4
|
38212
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259284
|
Enable pnpm
|
38212
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259285
|
Run https://github.com/actions/setup-node@v4
|
38212
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259286
|
Private registry auth (temporary userconfig)
|
38212
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259287
|
Install locked governance tools
|
38212
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259288
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38212
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259289
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38212
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259290
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38212
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259291
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38212
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259292
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38212
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259293
|
Upload package tarballs
|
38212
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259294
|
Upload public static evidence
|
38212
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710135
|
1793710225
|
Edit
Delete
|
|
259295
|
Candidate tag (real run attempt, computed per job)
|
38213
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710225
|
1793710256
|
Edit
Delete
|
|
259296
|
Run https://github.com/actions/checkout@v4
|
38213
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710225
|
1793710256
|
Edit
Delete
|
|
259297
|
Enable pnpm
|
38213
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710225
|
1793710256
|
Edit
Delete
|
|
259298
|
Run https://github.com/actions/setup-node@v4
|
38213
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710225
|
1793710256
|
Edit
Delete
|
|
259299
|
Private registry auth (temporary userconfig)
|
38213
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710225
|
1793710256
|
Edit
Delete
|
|
259300
|
Install locked governance tools
|
38213
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793710225
|
1793710256
|
Edit
Delete
|