Do not skip, but fail if the artifact doesn't have any slsa attestati…

…ons generated (#158) Signed-off-by: Radoslav Dimitrov <[email protected]>
mindersec · Sep 11, 2024 · 56955f0 · 56955f0
1 parent 9742547
commit 56955f0
Showing 1 changed file with 0 additions and 4 deletions.
diff --git a/rule-types/github/artifact_attestation_slsa.yaml b/rule-types/github/artifact_attestation_slsa.yaml
@@ -127,10 +127,6 @@ def:
         repo_ok(artifact, profile) if {
           artifact.Verification.attestation.predicate.buildDefinition.externalParameters.workflow.repository == profile.workflow_repository
         }
-
-        skip if {
-          count(artifacts_github_provenance) == 0
-        }
   # Defines the configuration for alerting on the rule
   alert:
     type: security_advisory