Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use cached artifacts instead of downloading them when possible #811

Open
behnazh-w opened this issue Aug 1, 2024 · 0 comments
Open

Use cached artifacts instead of downloading them when possible #811

behnazh-w opened this issue Aug 1, 2024 · 0 comments
Assignees
Labels
enhancement Enhancement of a feature slsa-provenance The issues related to SLSA provenances

Comments

@behnazh-w
Copy link
Member

We should use the cached artifacts in .m2 or Python virtual environment instead of downloading them both to improve performance and make sure we analyze the artifact that the end user is mostly likely using (which is very likely the cached one).

Here are the checks where we can avoid downloading the artifacts:

  • mcn_provenance_level_three_1
  • mcn_detect_malicious_metadata_1
@behnazh-w behnazh-w added enhancement Enhancement of a feature slsa-provenance The issues related to SLSA provenances labels Aug 1, 2024
@benmss benmss self-assigned this Aug 8, 2024
@behnazh-w behnazh-w assigned tromai and unassigned benmss Sep 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Enhancement of a feature slsa-provenance The issues related to SLSA provenances
Projects
None yet
Development

When branches are created from issues, their pull requests are automatically linked.

3 participants