Skip to content

Commit

Permalink
reword change
Browse files Browse the repository at this point in the history
Signed-off-by: arewm <arewm@users.noreply.github.com>
  • Loading branch information
arewm committed Aug 22, 2023
1 parent 4cfb812 commit a57d635
Showing 1 changed file with 6 additions and 5 deletions.
11 changes: 6 additions & 5 deletions docs/spec/v1.0/requirements.md
Original file line number Diff line number Diff line change
Expand Up @@ -317,11 +317,12 @@ If the build platform leverages a cache for builds, it MUST guarantee the follow
cache used by another build, also known as "cache poisoning". In other
words, the output of the build MUST be identical whether or not the cache is
used.
- If the build platform is capable of providing the provenance for an external
resource without a cache, then the provenance MUST remain unchanged if a cache
is used. In other words, the output of the provenance MUST be identical whether
or not the cache is used. Communication with the build cache MUST NOT be present
in `resolvedDependencies`.
- If the build platform is capable of providing the provenance information for
an external resource when a cache is not in use, then the provenance
information MUST remain unchanged if a cache is used. In other words, the
information in the provenance MUST be identical whether or not the cache is
used. Communication with the build cache MUST NOT be represented in
`resolvedDependencies`.

There are no sub-requirements on the build itself. Build L3 is limited to
ensuring that a well-intentioned build runs securely. It does not require that
Expand Down

0 comments on commit a57d635

Please sign in to comment.