|
273901
|
Upload identity evidence
|
39310
|
16
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235564
|
1794235564
|
Edit
Delete
|
|
273902
|
Candidate tag (real run attempt, computed per job)
|
39311
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273903
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39311
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273904
|
Run ./.git/ci-actions/checkout
|
39311
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273905
|
Enable pnpm
|
39311
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273906
|
Run ./.git/ci-actions/setup-node
|
39311
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273907
|
Private registry auth (temporary userconfig)
|
39311
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273908
|
Install locked governance tools
|
39311
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273909
|
Resolve npmrc for BuildKit secret (never printed)
|
39311
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273910
|
Build runtime image from git archive HEAD:runtime Build runtime image from git archive HEAD:runtime (reports/image-digest.json)...
|
39311
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273911
|
Install syft (pinned) and generate SPDX SBOM
|
39311
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273912
|
Install cosign (pinned)
|
39311
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273913
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
39311
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273914
|
Upload image evidence
|
39311
|
12
|
116
|
4
|
0
|
0
|
0
|
0
|
1794235566
|
1794235567
|
Edit
Delete
|
|
273915
|
Candidate tag (real run attempt, computed per job)
|
39312
|
0
|
116
|
2
|
37
|
3
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273916
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39312
|
1
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273917
|
Run ./.git/ci-actions/checkout
|
39312
|
2
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273918
|
Enable pnpm
|
39312
|
3
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273919
|
Run ./.git/ci-actions/setup-node
|
39312
|
4
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273920
|
Download static evidence
|
39312
|
5
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273921
|
Download runtime evidence
|
39312
|
6
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273922
|
Download identity evidence
|
39312
|
7
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273923
|
Download port-conformance evidence
|
39312
|
8
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273924
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
39312
|
9
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273925
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
39312
|
10
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273926
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
39312
|
11
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273927
|
Upload candidate evidence
|
39312
|
12
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273928
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
39312
|
13
|
116
|
4
|
40
|
0
|
1794235568
|
1794235568
|
1794235568
|
1794235568
|
Edit
Delete
|
|
273929
|
Verify fixed private fixture filesystems without c Verify fixed private fixture filesystems without changing production...
|
39313
|
0
|
116
|
2
|
8
|
25
|
1794235927
|
1794235928
|
1794235927
|
1794235928
|
Edit
Delete
|
|
273930
|
Verify fixed private fixture filesystems without c Verify fixed private fixture filesystems without changing production...
|
39314
|
0
|
116
|
2
|
11
|
5
|
1794236171
|
1794236171
|
1794236171
|
1794236171
|
Edit
Delete
|
|
273931
|
Verify fixed private fixture filesystems without c Verify fixed private fixture filesystems without changing production...
|
39315
|
0
|
116
|
1
|
11
|
1
|
1794236474
|
1794236474
|
1794236474
|
1794236474
|
Edit
Delete
|
|
273932
|
Verify fixed private fixture filesystems without c Verify fixed private fixture filesystems without changing production...
|
39316
|
0
|
116
|
1
|
11
|
11
|
1794236610
|
1794236611
|
1794236610
|
1794236611
|
Edit
Delete
|
|
273933
|
Candidate tag (real run attempt, computed per job)
|
39317
|
0
|
116
|
2
|
9
|
3
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273934
|
Prepare fixed Actions using existing read-only job Prepare fixed Actions using existing read-only job token...
|
39317
|
1
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273935
|
Run ./.git/ci-actions/checkout
|
39317
|
2
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273936
|
Enable pnpm
|
39317
|
3
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273937
|
Run ./.git/ci-actions/setup-node
|
39317
|
4
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273938
|
Private registry auth (temporary userconfig)
|
39317
|
5
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273939
|
Install locked governance tools
|
39317
|
6
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273940
|
Test bounded Action preparation (synthetic credent Test bounded Action preparation (synthetic credentials only)...
|
39317
|
7
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273941
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
39317
|
8
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273942
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
39317
|
9
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273943
|
Install dictionary service dependencies (independe Install dictionary service dependencies (independent frozen lockfile)...
|
39317
|
10
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273944
|
Docker CLI for pinned-image syntax checks (runner Docker CLI for pinned-image syntax checks (runner images may ship without it)...
|
39317
|
11
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273945
|
Caddy and alert rule syntax (compose-pinned images Caddy and alert rule syntax (compose-pinned images; skipped fails here)...
|
39317
|
12
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273946
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
39317
|
13
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273947
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
39317
|
14
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273948
|
Upload package tarballs
|
39317
|
15
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273949
|
Upload public static evidence
|
39317
|
16
|
116
|
4
|
12
|
0
|
1794237169
|
1794237169
|
1794237169
|
1794237169
|
Edit
Delete
|
|
273950
|
Candidate tag (real run attempt, computed per job)
|
39318
|
0
|
116
|
2
|
9
|
3
|
1794237171
|
1794237171
|
1794237171
|
1794237171
|
Edit
Delete
|