@@ -12,9 +12,13 @@ permissions:
1212 packages : write
1313
1414jobs :
15+ # ######################################
16+ # STAGE 1: BUILD & PACKAGE
17+ # ######################################
18+
1519 # Build BioGears from source on Linux using Docker
1620 build-linux :
17- name : PHASE 1A - Build BioGears (Linux)
21+ name : Build BioGears (Linux)
1822 runs-on : ubuntu-latest
1923
2024 steps :
@@ -327,7 +331,7 @@ jobs:
327331
328332 # Build Docker runtime image containing BioGears
329333 build-docker :
330- name : PHASE 1B - Build Docker Images
334+ name : Build Docker Images
331335 needs : build-linux
332336 runs-on : ubuntu-latest
333337
@@ -559,9 +563,13 @@ jobs:
559563 name : image-digest
560564 path : image-digest.txt
561565
566+ # ######################################
567+ # STAGE 2: SECURITY METADATA
568+ # ######################################
569+
562570 # Generate SBOM and scan for vulnerabilities
563571 security-scan :
564- name : PHASE 2A - Generate SBOM and Scan
572+ name : Generate SBOM and Scan
565573 needs : build-docker
566574 runs-on : ubuntu-latest
567575 continue-on-error : true # Allow this job to succeed even if it can't scan
@@ -670,7 +678,7 @@ jobs:
670678
671679 # Create and sign policies
672680 create-policies :
673- name : PHASE 2B - Create and Sign Policies
681+ name : Create and Sign Policies
674682 runs-on : ubuntu-latest
675683
676684 steps :
@@ -956,7 +964,7 @@ jobs:
956964
957965 # Generate attestations
958966 generate-attestations :
959- name : PHASE 2C - Generate Attestations
967+ name : Generate Attestations
960968 needs : [build-linux, build-docker, security-scan, create-policies]
961969 runs-on : ubuntu-latest
962970 continue-on-error : true # Allow this job to succeed even if it encounters issues
@@ -1375,7 +1383,7 @@ jobs:
13751383
13761384 # Add comprehensive security testing phase - MOVED BEFORE publish-artifacts
13771385 security-testing :
1378- name : PHASE 3A - Security Testing & Validation
1386+ name : Security Testing & Validation
13791387 needs : generate-attestations
13801388 runs-on : ubuntu-latest
13811389
@@ -1663,7 +1671,7 @@ jobs:
16631671
16641672 # Publish artifacts with ORAS - Updated dependency to depend on security-testing
16651673 publish-artifacts :
1666- name : PHASE 3B - Publish with ORAS
1674+ name : Publish with ORAS
16671675 needs : security-testing
16681676 runs-on : ubuntu-latest
16691677 continue-on-error : true # Allow this job to succeed even if there are issues
@@ -2081,7 +2089,7 @@ jobs:
20812089
20822090 # Create demonstration materials for supply chain security
20832091 create-demo-materials :
2084- name : PHASE 4A - Create Security Demo Materials
2092+ name : Create Security Demo Materials
20852093 needs : publish-artifacts
20862094 runs-on : ubuntu-latest
20872095 continue-on-error : true
@@ -2586,7 +2594,7 @@ jobs:
25862594
25872595 # Add this job after the create-demo-materials job
25882596 run-security-demos :
2589- name : PHASE 4B - Run Security Demonstrations
2597+ name : Run Security Demonstrations
25902598 needs : [create-demo-materials, publish-artifacts]
25912599 runs-on : ubuntu-latest
25922600
0 commit comments