From 7da9888458e7345a870df84c97e8b1c10f4d1f30 Mon Sep 17 00:00:00 2001 From: Niels Kaspers Date: Mon, 17 Aug 2026 08:06:18 +0200 Subject: [PATCH] docs(scout): clarify PR-only compare workflow Clarify that the local Docker Scout comparison in the GitHub Actions example only runs on pull requests, while non-PR events push the image and enable SBOM/provenance instead. Change notes: - content/manuals/scout/integrations/ci/gha.md - explain the PR-only compare path and align the note with the workflow example --- content/manuals/scout/integrations/ci/gha.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/content/manuals/scout/integrations/ci/gha.md b/content/manuals/scout/integrations/ci/gha.md index 7fe6ea486c11..9575c8fd4c02 100644 --- a/content/manuals/scout/integrations/ci/gha.md +++ b/content/manuals/scout/integrations/ci/gha.md @@ -109,7 +109,11 @@ This creates workflow steps to: > evaluate the image locally, you must ensure that the image is loaded the > local image store of your runner. > -> This comparison doesn't work if you push the image to a registry, or if you +> In this example, the comparison step runs only for `pull_request` events. On +> other events, the workflow pushes the image and enables SBOM and provenance +> attestations instead of loading the image locally. +> +> The comparison doesn't work if you push the image to a registry, or if you > build an image that can't be loaded to the runner's local image store. For > example, multi-platform images or images with SBOM or provenance attestation > can't be loaded to the local image store.