Update pkg/cmd/attestation/verification/policy.go

Co-authored-by: Phill MV <phillmv@github.com>
This commit is contained in:
Meredith Lancaster 2024-11-25 14:49:56 -07:00 committed by GitHub
parent 241bb2edd1
commit 4b83d8e73b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -61,7 +61,7 @@ The following policy criteria will be enforced against all attestations:
info := fmt.Sprintf(template, c.PredicateType, c.Certificate.Issuer, c.Certificate.SourceRepositoryOwnerURI)
if c.Certificate.SourceRepositoryURI != "" {
info += fmt.Sprintf("\n- Artifact built in a repository whose URI is %s", c.Certificate.SourceRepositoryURI)
info += fmt.Sprintf("\n- Source Repository URI must match %s", c.Certificate.SourceRepositoryURI)
}
if c.Certificate.RunnerEnvironment == GitHubRunner {