comment

Signed-off-by: laurentsimon <laurentsimon@google.com>
slsa-framework · Aug 2, 2023 · 9addffc · 9addffc
1 parent 17ec576
commit 9addffc
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/experimental/maven-plugin/src/main/java/io/github/slsa-framework/SlsaVerificationMojo.java b/experimental/maven-plugin/src/main/java/io/github/slsa-framework/SlsaVerificationMojo.java
@@ -122,8 +122,6 @@ public void execute() throws MojoExecutionException, MojoFailureException {
                 continue;
             }
 
-            // Run slsa verification on the artifact and print the result
-            // It will never fail the build process
             // TODO(#665): Harden against script injections.
             String arguments = "verify-artifact --provenance-path ";
             arguments += "${project.build.directory}/slsa/" + artifact.getArtifactId() + "-" + artifact.getVersion() + "-jar.build.slsa ";