|
270301
|
Install locked governance tools
|
39048
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197381
|
1794197381
|
Edit
Delete
|
|
270302
|
Resolve npmrc for BuildKit secret (never printed)
|
39048
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197381
|
1794197381
|
Edit
Delete
|
|
270303
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39048
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197381
|
1794197381
|
Edit
Delete
|
|
270304
|
Install syft (pinned) and generate SPDX SBOM
|
39048
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197381
|
1794197381
|
Edit
Delete
|
|
270305
|
Install cosign (pinned)
|
39048
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197381
|
1794197381
|
Edit
Delete
|
|
270306
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39048
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197381
|
1794197381
|
Edit
Delete
|
|
270307
|
Upload image evidence
|
39048
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197381
|
1794197381
|
Edit
Delete
|
|
270308
|
Candidate tag (real run attempt, computed per job)
|
39049
|
0
|
116
|
2
|
70
|
3
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270309
|
Run https://github.com/actions/checkout@v4
|
39049
|
1
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270310
|
Enable pnpm
|
39049
|
2
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270311
|
Run https://github.com/actions/setup-node@v4
|
39049
|
3
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270312
|
Download static evidence
|
39049
|
4
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270313
|
Download runtime evidence
|
39049
|
5
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270314
|
Download identity evidence
|
39049
|
6
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270315
|
Download port-conformance evidence
|
39049
|
7
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270316
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39049
|
8
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270317
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39049
|
9
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270318
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39049
|
10
|
116
|
4
|
73
|
0
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270319
|
Upload candidate evidence
|
39049
|
11
|
116
|
2
|
73
|
7
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270320
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
39049
|
12
|
116
|
2
|
80
|
3
|
1794197390
|
1794197390
|
1794197383
|
1794197390
|
Edit
Delete
|
|
270321
|
Measure fixed metadata sizing code only; no mainte Measure fixed metadata sizing code only; no maintenance...
|
39050
|
0
|
116
|
1
|
8
|
1
|
1794197417
|
1794197435
|
1794197417
|
1794197435
|
Edit
Delete
|
|
270322
|
Candidate tag (real run attempt, computed per job)
|
39051
|
0
|
116
|
2
|
26
|
3
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270323
|
Run https://github.com/actions/checkout@v4
|
39051
|
1
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270324
|
Enable pnpm
|
39051
|
2
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270325
|
Run https://github.com/actions/setup-node@v4
|
39051
|
3
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270326
|
Private registry auth (temporary userconfig)
|
39051
|
4
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270327
|
Install locked governance tools
|
39051
|
5
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270328
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39051
|
6
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270329
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39051
|
7
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270330
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39051
|
8
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270331
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39051
|
9
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270332
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39051
|
10
|
116
|
4
|
29
|
0
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270333
|
Upload package tarballs
|
39051
|
11
|
116
|
2
|
29
|
5
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270334
|
Upload public static evidence
|
39051
|
12
|
116
|
1
|
34
|
3
|
1794197706
|
1794197706
|
1794197700
|
1794197706
|
Edit
Delete
|
|
270335
|
Candidate tag (real run attempt, computed per job)
|
39052
|
0
|
116
|
2
|
22
|
3
|
1794197709
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270336
|
Run https://github.com/actions/checkout@v4
|
39052
|
1
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270337
|
Enable pnpm
|
39052
|
2
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270338
|
Run https://github.com/actions/setup-node@v4
|
39052
|
3
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270339
|
Private registry auth (temporary userconfig)
|
39052
|
4
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270340
|
Install locked governance tools
|
39052
|
5
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270341
|
Install runtime workspace (frozen lockfile)
|
39052
|
6
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270342
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39052
|
7
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270343
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39052
|
8
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270344
|
Generate Prisma clients
|
39052
|
9
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270345
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
39052
|
10
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270346
|
Repo-root governance gate
|
39052
|
11
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270347
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
39052
|
12
|
116
|
4
|
25
|
0
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270348
|
Upload static evidence
|
39052
|
13
|
116
|
1
|
25
|
5
|
1794197710
|
1794197710
|
1794197707
|
1794197710
|
Edit
Delete
|
|
270349
|
Run https://github.com/actions/checkout@v4
|
39053
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197712
|
1794197713
|
Edit
Delete
|
|
270350
|
Enable pnpm
|
39053
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794197712
|
1794197713
|
Edit
Delete
|