fix: accept provenances that are not inferred in the provenance checks (#802)

Signed-off-by: behnazh-w <[email protected]>

Author: behnazh-w

src/macaron/slsa_analyzer/checks/provenance_available_check.py

@@ -504,7 +504,7 @@ def run_check(self, ctx: AnalyzeContext) -> CheckResultData:
         CheckResultData
             The result of the check.
         """
-        if ctx.dynamic_data["provenance"]:
+        if not ctx.dynamic_data["is_inferred_prov"] and ctx.dynamic_data["provenance"]:
             return CheckResultData(
                 result_tables=[ProvenanceAvailableFacts(confidence=Confidence.HIGH)],
                 result_type=CheckResultType.PASSED,

src/macaron/slsa_analyzer/checks/provenance_verified_check.py

@@ -67,7 +67,7 @@ def run_check(self, ctx: AnalyzeContext) -> CheckResultData:
         CheckResultData
             The result of the check.
         """
-        if not ctx.dynamic_data["provenance"]:
+        if ctx.dynamic_data["is_inferred_prov"] or not ctx.dynamic_data["provenance"]:
             # Provenance is not available.
             return CheckResultData(
                 result_tables=[ProvenanceVerifiedFacts(build_level=0, confidence=Confidence.HIGH)],