|
271851
|
Install locked governance tools
|
39168
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214759
|
1794214760
|
Edit
Delete
|
|
271852
|
Resolve npmrc for BuildKit secret (never printed)
|
39168
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214759
|
1794214760
|
Edit
Delete
|
|
271853
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39168
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214759
|
1794214760
|
Edit
Delete
|
|
271854
|
Install syft (pinned) and generate SPDX SBOM
|
39168
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214759
|
1794214760
|
Edit
Delete
|
|
271855
|
Install cosign (pinned)
|
39168
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214759
|
1794214760
|
Edit
Delete
|
|
271856
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39168
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214759
|
1794214760
|
Edit
Delete
|
|
271857
|
Upload image evidence
|
39168
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214759
|
1794214760
|
Edit
Delete
|
|
271858
|
Candidate tag (real run attempt, computed per job)
|
39169
|
0
|
116
|
2
|
9
|
3
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271859
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39169
|
1
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271860
|
Run ./.git/ci-actions/checkout
|
39169
|
2
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271861
|
Enable pnpm
|
39169
|
3
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271862
|
Run ./.git/ci-actions/setup-node
|
39169
|
4
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271863
|
Private registry auth (temporary userconfig)
|
39169
|
5
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271864
|
Install locked governance tools
|
39169
|
6
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271865
|
Test bounded Action preparation (synthetic credent Test bounded Action preparation (synthetic credentials only)...
|
39169
|
7
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271866
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39169
|
8
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271867
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39169
|
9
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271868
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39169
|
10
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271869
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
39169
|
11
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271870
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
39169
|
12
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271871
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39169
|
13
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271872
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39169
|
14
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271873
|
Upload package tarballs
|
39169
|
15
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271874
|
Upload public static evidence
|
39169
|
16
|
116
|
4
|
12
|
0
|
1794214762
|
1794214762
|
1794214761
|
1794214762
|
Edit
Delete
|
|
271875
|
Candidate tag (real run attempt, computed per job)
|
39170
|
0
|
116
|
2
|
9
|
3
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271876
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39170
|
1
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271877
|
Run ./.git/ci-actions/checkout
|
39170
|
2
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271878
|
Enable pnpm
|
39170
|
3
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271879
|
Run ./.git/ci-actions/setup-node
|
39170
|
4
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271880
|
Private registry auth (temporary userconfig)
|
39170
|
5
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271881
|
Install locked governance tools
|
39170
|
6
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271882
|
Install runtime workspace (frozen lockfile)
|
39170
|
7
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271883
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39170
|
8
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271884
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39170
|
9
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271885
|
Generate Prisma clients
|
39170
|
10
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271886
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
39170
|
11
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271887
|
Repo-root governance gate
|
39170
|
12
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271888
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
39170
|
13
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271889
|
Upload static evidence
|
39170
|
14
|
116
|
4
|
12
|
0
|
1794214764
|
1794214764
|
1794214763
|
1794214764
|
Edit
Delete
|
|
271890
|
Candidate tag (real run attempt, computed per job)
|
39171
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271891
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39171
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271892
|
Run ./.git/ci-actions/checkout
|
39171
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271893
|
Enable pnpm
|
39171
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271894
|
Run ./.git/ci-actions/setup-node
|
39171
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271895
|
Download static evidence
|
39171
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271896
|
Download runtime evidence
|
39171
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271897
|
Download identity evidence
|
39171
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271898
|
Download port-conformance evidence
|
39171
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271899
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39171
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|
|
271900
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39171
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794214765
|
1794214766
|
Edit
Delete
|