File tree Expand file tree Collapse file tree 1 file changed +5
-1
lines changed
src/macaron/slsa_analyzer/checks Expand file tree Collapse file tree 1 file changed +5
-1
lines changed Original file line number Diff line number Diff line change @@ -68,8 +68,12 @@ class ArtifactPipelineFacts(CheckFacts):
6868class ArtifactPipelineCheck (BaseCheck ):
6969 """This check detects a pipeline from which an artifact is published.
7070
71+ This check depends on the deploy command identified by the ``mcn_build_as_code_1 check``.
72+ If a deploy command is detected, this check will attempt to locate a successful CI
73+ pipeline that triggered the step containing the deploy command.
74+
7175 When a verifiable provenance is found for an artifact, we use it to obtain the pipeline trigger.
72- Otherwise, we use heuristics to check whether a CI workflow run has automatically published the artifact .
76+ Otherwise, we use heuristics to find the triggering pipeline .
7377
7478 We use several heuristics in this check for inference:
7579
You can’t perform that action at this time.
0 commit comments