Skip to content

Commit e592c5d

Browse files
committed
docs: improve the docstring of ArtifactPipelineCheck
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
1 parent 3bbbe48 commit e592c5d

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

src/macaron/slsa_analyzer/checks/infer_artifact_pipeline_check.py

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,8 +68,12 @@ class ArtifactPipelineFacts(CheckFacts):
6868
class ArtifactPipelineCheck(BaseCheck):
6969
"""This check detects a pipeline from which an artifact is published.
7070
71+
This check depends on the deploy command identified by the ``mcn_build_as_code_1 check``.
72+
If a deploy command is detected, this check will attempt to locate a successful CI
73+
pipeline that triggered the step containing the deploy command.
74+
7175
When a verifiable provenance is found for an artifact, we use it to obtain the pipeline trigger.
72-
Otherwise, we use heuristics to check whether a CI workflow run has automatically published the artifact.
76+
Otherwise, we use heuristics to find the triggering pipeline.
7377
7478
We use several heuristics in this check for inference:
7579

0 commit comments

Comments
 (0)