policy

Apr 18, 2026

Changes in this version

+ type RefUpdate struct

+ New *api.PolicyRef

+ Old *api.PolicyRef

+ type Updater struct

+ MaxParallel int

+ func NewUpdater() *Updater

+ func (u *Updater) ApplyUpdates(updates map[string][]*RefUpdate) (map[string][]*RefUpdate, error)

+ func (u *Updater) CheckUpdates(locations ...string) (map[string][]*RefUpdate, error)

+ func (u *Updater) Update(locations ...string) (map[string][]*RefUpdate, error)

Mar 2, 2026

Changes in this version

type CompilerOptions

+ MaxParallelFetches int

+ MaxTotalFetches int

type Fetcher

+ Limits options.Limits

+ func NewFetcherWithLimits(limits options.Limits) *Fetcher

+ func (gf *Fetcher) GetGroupBatched(uris []string, batchSize int) ([][]byte, error)

Dec 7, 2025

Changes in this version

+ func PolicyOrSetOrGroup(set *api.PolicySet, pcy *api.Policy, grp *api.PolicyGroup) any

type Compiler

+ func (compiler *Compiler) CompilePolicyGroup(grp *api.PolicyGroup, funcs ...options.OptFn) (*api.PolicyGroup, error)

type Parser

+ func (p *Parser) ParsePolicyGroup(policyGroupData []byte, funcs ...options.OptFn) (*api.PolicyGroup, error)

+ func (p *Parser) ParsePolicyGroupFile(path string, funcs ...options.OptFn) (*api.PolicyGroup, error)

+ func (p *Parser) ParseVerifyPolicyGroup(policyGroupData []byte, funcs ...options.OptFn) (*api.PolicyGroup, attestation.Verification, error)

+ func (p *Parser) ParseVerifyPolicyOrSetOrGroup(data []byte, funcs ...options.OptFn) (set *api.PolicySet, pcy *api.Policy, grp *api.PolicyGroup, ...)

type StorageBackend

+ GetReferencedGroup func(api.RemoteReference) (*api.PolicyGroup, error)

Sep 18, 2025

Changes in this version

type Compiler

+ func (compiler *Compiler) CompileVerify(data []byte, funcs ...options.OptFn) (set *api.PolicySet, pcy *api.Policy, ver attestation.Verification, err error)

+ func (compiler *Compiler) CompileVerifyFile(path string, funcs ...options.OptFn) (*api.PolicySet, *api.Policy, attestation.Verification, error)

+ func (compiler *Compiler) CompileVerifyLocation(location string, funcs ...options.OptFn) (set *api.PolicySet, pcy *api.Policy, ver attestation.Verification, err error)

+ func (compiler *Compiler) CompileVerifyRemote(uri string, funcs ...options.OptFn) (set *api.PolicySet, pcy *api.Policy, ver attestation.Verification, err error)

type Parser

+ func (p *Parser) OpenVerify(location string, funcs ...options.OptFn) (set *api.PolicySet, pcy *api.Policy, v attestation.Verification, err error)

+ func (p *Parser) ParseVerifyPolicy(data []byte, funcs ...options.OptFn) (*api.Policy, attestation.Verification, error)

+ func (p *Parser) ParseVerifyPolicyOrSet(data []byte, funcs ...options.OptFn) (set *api.PolicySet, pcy *api.Policy, v attestation.Verification, err error)

+ func (p *Parser) ParseVerifyPolicySet(policySetData []byte, funcs ...options.OptFn) (*api.PolicySet, attestation.Verification, error)

Aug 15, 2025

Changes in this version

+ const AssertModeAND

+ const AssertModeOR

+ const EnforceOff

+ const EnforceOn

+ var ErrParseInconsistency = errors.New("internal error: fetched reference ID and policy ID mismatch")

+ var ErrUnsupportedLocationURI = errors.New("unsupported policy location")

+ func PolicyOrSet(set *api.PolicySet, pcy *api.Policy) any

+ type Compiler struct

+ Options CompilerOptions

+ Store StorageBackend

+ func NewCompiler() (*Compiler, error)

+ func (compiler *Compiler) Compile(data []byte) (set *api.PolicySet, pcy *api.Policy, err error)

+ func (compiler *Compiler) CompileFile(path string) (set *api.PolicySet, pcy *api.Policy, err error)

+ func (compiler *Compiler) CompileLocation(location string) (set *api.PolicySet, pcy *api.Policy, err error)

+ func (compiler *Compiler) CompilePolicy(set *api.Policy) (*api.Policy, error)

+ func (compiler *Compiler) CompileRemote(uri string) (set *api.PolicySet, pcy *api.Policy, err error)

+ func (compiler *Compiler) CompileSet(set *api.PolicySet) (*api.PolicySet, error)

+ type CompilerOptions struct

+ MaxRemoteRecursion int

+ type Fetcher struct

+ func NewFetcher() *Fetcher

+ func (gf *Fetcher) Get(uri string) ([]byte, error)

+ func (gf *Fetcher) GetFromGit(locator string) ([]byte, error)

+ func (gf *Fetcher) GetFromHTTP(url string) ([]byte, error)

+ func (gf *Fetcher) GetGroup(uris []string) ([][]byte, error)

+ type Parser struct

+ func NewParser() *Parser

+ func (p *Parser) Open(location string) (set *api.PolicySet, pcy *api.Policy, err error)

+ func (p *Parser) ParsePolicy(data []byte) (*api.Policy, error)

+ func (p *Parser) ParsePolicyFile(path string) (*api.Policy, error)

+ func (p *Parser) ParsePolicyOrSet(data []byte) (set *api.PolicySet, pcy *api.Policy, err error)

+ func (p *Parser) ParsePolicySet(policySetData []byte) (*api.PolicySet, error)

+ func (p *Parser) ParsePolicySetFile(path string) (*api.PolicySet, error)

+ type PolicyFetcher interface

+ Get func(string) ([]byte, error)

+ GetGroup func(uris []string) ([][]byte, error)

+ type Signer struct

+ Options options.SignerOptions

+ func NewSigner(funcs ...options.SignerOptFn) *Signer

+ func (ps *Signer) SignPolicyData(data []byte, w io.Writer, funcs ...options.SignerOptFn) error

+ func (ps *Signer) SignPolicyFile(path string, w io.Writer, funcs ...options.SignerOptFn) error

+ type StorageBackend interface

+ GetReferencedPolicy func(*api.PolicyRef) (*api.Policy, error)

+ StoreReference func(*api.PolicyRef) error

+ StoreReferenceWithReturn func(*api.PolicyRef) (*api.PolicySet, *api.Policy, error)