Function buildDetectionPassedCondition

pkg/workflow/expression_builder.go:283–291

buildDetectionPassedCondition builds the condition to check if the detection job either succeeded (no threats found) or was skipped (agent produced no outputs or patch — nothing to detect against). Use this for downstream jobs that must run in both cases.

()

// succeeded (no threats found) or was skipped (agent produced no outputs or patch — nothing
// to detect against). Use this for downstream jobs that must run in both cases.
func buildDetectionPassedCondition() ConditionNode {
	return BuildOr(
		buildDetectionSuccessCondition(),
		BuildEquals(
			BuildPropertyAccess(fmt.Sprintf("needs.%s.result", constants.DetectionJobName)),
			BuildStringLiteral("skipped"),
		),
	)
}

// Helper functions for building common GitHub Actions expression patterns