Documentation
¶
Index ¶
- Constants
- Variables
- func CreateAttestationResolver(resolver oci.ImageDetailsResolver, mapping *config.PolicyMapping) (oci.AttestationResolver, error)
- func CreateImageDetailsResolver(imageSource *oci.ImageSpec) (oci.ImageDetailsResolver, error)
- func RegoFunctions(resolver oci.AttestationResolver) []*tester.Builtin
- func WithPolicyEvaluator(ctx context.Context, pe PolicyEvaluator) context.Context
- type MockPolicyEvaluator
- type Policy
- type PolicyEvaluator
- type PolicyFile
- type PolicyInput
- type PolicyOptions
- type Result
- type Summary
- type Violation
Constants ¶
View Source
const (
DefaultQuery = "result := data.attest.result"
)
Variables ¶
View Source
var PolicyEvaluatorCtxKey policyEvaluatorCtxKeyType
Functions ¶
func CreateAttestationResolver ¶ added in v0.1.5
func CreateAttestationResolver(resolver oci.ImageDetailsResolver, mapping *config.PolicyMapping) (oci.AttestationResolver, error)
func CreateImageDetailsResolver ¶ added in v0.1.5
func CreateImageDetailsResolver(imageSource *oci.ImageSpec) (oci.ImageDetailsResolver, error)
func RegoFunctions ¶
func RegoFunctions(resolver oci.AttestationResolver) []*tester.Builtin
func WithPolicyEvaluator ¶
func WithPolicyEvaluator(ctx context.Context, pe PolicyEvaluator) context.Context
sets PolicyEvaluator in context
Types ¶
type MockPolicyEvaluator ¶
type MockPolicyEvaluator struct {
EvaluateFunc func(ctx context.Context, resolver oci.AttestationResolver, pctx *Policy, input *PolicyInput) (*Result, error)
}
func (*MockPolicyEvaluator) Evaluate ¶
func (pe *MockPolicyEvaluator) Evaluate(ctx context.Context, resolver oci.AttestationResolver, pctx *Policy, input *PolicyInput) (*Result, error)
type Policy ¶ added in v0.1.4
type Policy struct {
InputFiles []*PolicyFile
Query string
Mapping *config.PolicyMapping
}
func ResolvePolicy ¶
func ResolvePolicy(ctx context.Context, detailsResolver oci.ImageDetailsResolver, opts *PolicyOptions) (*Policy, error)
type PolicyEvaluator ¶
type PolicyEvaluator interface {
Evaluate(ctx context.Context, resolver oci.AttestationResolver, pctx *Policy, input *PolicyInput) (*Result, error)
}
func GetMockPolicy ¶ added in v0.1.4
func GetMockPolicy() PolicyEvaluator
func GetPolicyEvaluator ¶
func GetPolicyEvaluator(ctx context.Context) (PolicyEvaluator, error)
gets PolicyEvaluator from context, defaults to Rego PolicyEvaluator if not set
func NewRegoEvaluator ¶
func NewRegoEvaluator(debug bool) PolicyEvaluator
type PolicyFile ¶
type PolicyInput ¶
type PolicyOptions ¶
type Result ¶ added in v0.1.4
type Result struct {
Success bool `json:"success"`
Violations []Violation `json:"violations"`
Summary Summary `json:"summary"`
}
func AllowedResult ¶ added in v0.1.4
func AllowedResult() *Result
Click to show internal directories.
Click to hide internal directories.