Method buildUploadDetectionLogStep

pkg/workflow/threat_detection_steps.go:422–433

buildUploadDetectionLogStep creates the step to upload the detection-artifact. In workflow_call context, the artifact name is prefixed to avoid name clashes when the same reusable workflow is called multiple times within a single workflow run. The prefix comes from the agent job output since the det

(data *WorkflowData)

// same reusable workflow is called multiple times within a single workflow run.
// The prefix comes from the agent job output since the detection job depends on the agent job.
func (c *Compiler) buildUploadDetectionLogStep(data *WorkflowData) []string {
	detectionArtifactName := artifactPrefixExprForAgentDownstreamJob(data) + constants.DetectionArtifactName
	return []string{
		"      - name: Upload threat detection log\n",
		fmt.Sprintf("        if: %s\n", detectionStepCondition),
		fmt.Sprintf("        uses: %s\n", c.getActionPin("actions/upload-artifact")),
		"        with:\n",
		"          name: " + detectionArtifactName + "\n",
		"          path: /tmp/gh-aw/threat-detection/detection.log\n",
		"          if-no-files-found: ignore\n",
	}
}

// buildInstallThreatDetectStep creates a step that installs the threat-detect binary
// from GitHub Releases at the pinned version. This is used when the gh-aw-detection