Step analyze fix (#257)

* If any matching evidence is found, step should pass * Remove passed step results if artifacts don't match --------- Signed-off-by: John Kjell <[email protected]>
in-toto · Jun 11, 2024 · 946f98e · 946f98e
1 parent 26d4ac1
commit 946f98e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/policy/policy.go b/policy/policy.go
@@ -331,6 +331,7 @@ func (p Policy) verifyArtifacts(resultsByStep map[string]StepResult) (map[string
 				}
 
 				result.Rejected = append(result.Rejected, reject)
+				result.Passed = []source.CollectionVerificationResult{}
 				resultsByStep[step.Name] = result
 			}
 		}

diff --git a/policy/step.go b/policy/step.go
@@ -65,7 +65,7 @@ type StepResult struct {
 // in order to save the failure reasons so we can present them all at the end of the verification process.
 func (r StepResult) Analyze() bool {
 	var pass bool
-	if len(r.Passed) > 0 && len(r.Rejected) == 0 {
+	if len(r.Passed) > 0 {
 		pass = true
 	}