|
266001
|
Install locked governance tools
|
38717
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983073
|
1793983074
|
Edit
Delete
|
|
266002
|
Resolve npmrc for BuildKit secret (never printed)
|
38717
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983073
|
1793983074
|
Edit
Delete
|
|
266003
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
38717
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983073
|
1793983074
|
Edit
Delete
|
|
266004
|
Install syft (pinned) and generate SPDX SBOM
|
38717
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983073
|
1793983074
|
Edit
Delete
|
|
266005
|
Install cosign (pinned)
|
38717
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983073
|
1793983074
|
Edit
Delete
|
|
266006
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
38717
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983073
|
1793983074
|
Edit
Delete
|
|
266007
|
Upload image evidence
|
38717
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983073
|
1793983074
|
Edit
Delete
|
|
266008
|
Candidate tag (real run attempt, computed per job)
|
38718
|
0
|
116
|
2
|
63
|
3
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266009
|
Run https://github.com/actions/checkout@v4
|
38718
|
1
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266010
|
Enable pnpm
|
38718
|
2
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266011
|
Run https://github.com/actions/setup-node@v4
|
38718
|
3
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266012
|
Download static evidence
|
38718
|
4
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266013
|
Download runtime evidence
|
38718
|
5
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266014
|
Download identity evidence
|
38718
|
6
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266015
|
Download port-conformance evidence
|
38718
|
7
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266016
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
38718
|
8
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266017
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
38718
|
9
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266018
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
38718
|
10
|
116
|
4
|
66
|
0
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266019
|
Upload candidate evidence
|
38718
|
11
|
116
|
2
|
66
|
5
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266020
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
38718
|
12
|
116
|
2
|
71
|
3
|
1793983082
|
1793983082
|
1793983075
|
1793983082
|
Edit
Delete
|
|
266021
|
Candidate tag (real run attempt, computed per job)
|
38719
|
0
|
116
|
2
|
23
|
3
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266022
|
Run https://github.com/actions/checkout@v4
|
38719
|
1
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266023
|
Enable pnpm
|
38719
|
2
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266024
|
Run https://github.com/actions/setup-node@v4
|
38719
|
3
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266025
|
Private registry auth (temporary userconfig)
|
38719
|
4
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266026
|
Install locked governance tools
|
38719
|
5
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266027
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
38719
|
6
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266028
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38719
|
7
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266029
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38719
|
8
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266030
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
38719
|
9
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266031
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
38719
|
10
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266032
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
38719
|
11
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266033
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
38719
|
12
|
116
|
4
|
26
|
0
|
1793983790
|
1793983790
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266034
|
Upload package tarballs
|
38719
|
13
|
116
|
2
|
26
|
3
|
1793983790
|
1793983791
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266035
|
Upload public static evidence
|
38719
|
14
|
116
|
1
|
29
|
1
|
1793983791
|
1793983791
|
1793983786
|
1793983791
|
Edit
Delete
|
|
266036
|
Candidate tag (real run attempt, computed per job)
|
38720
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266037
|
Run https://github.com/actions/checkout@v4
|
38720
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266038
|
Enable pnpm
|
38720
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266039
|
Run https://github.com/actions/setup-node@v4
|
38720
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266040
|
Private registry auth (temporary userconfig)
|
38720
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266041
|
Install locked governance tools
|
38720
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266042
|
Install runtime workspace (frozen lockfile)
|
38720
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266043
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
38720
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266044
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
38720
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266045
|
Generate Prisma clients
|
38720
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266046
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
38720
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266047
|
Repo-root governance gate
|
38720
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266048
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
38720
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266049
|
Upload static evidence
|
38720
|
13
|
116
|
3
|
0
|
0
|
0
|
0
|
1793983791
|
1793983914
|
Edit
Delete
|
|
266050
|
Run https://github.com/actions/checkout@v4
|
38721
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793983917
|
1793983917
|
Edit
Delete
|