policy

Aug 29, 2024

Changes in this version

type Options

+ Debug bool

Aug 28, 2024

Changes in this version

type Options

+ DisableTUF bool

+ type Resolver struct

+ func NewResolver(tufClient tuf.Downloader, opts *Options) *Resolver

+ func (r *Resolver) ResolvePolicy(_ context.Context, imageName string) (*Policy, error)

Aug 23, 2024

Changes in this version

type Input

+ Domain string

+ FamiliarName string

+ NormalizedName string

+ Platform string

+ Tag string

type Options

+ TUFClientOptions *tuf.ClientOptions

Aug 14, 2024

Changes in this version

type Policy

+ Digest map[string]string

+ URI string

Aug 1, 2024

Changes in this version

+ type Evaluator interface

+ Evaluate func(ctx context.Context, resolver oci.AttestationResolver, pctx *Policy, ...) (*Result, error)

+ type File struct

+ Content []byte

+ Path string

+ type Input struct

+ Digest string

+ IsCanonical bool

+ PURL string

+ type Options struct

+ AttestationStyle config.AttestationStyle

+ LocalPolicyDir string

+ LocalTargetsDir string

+ PolicyID string

+ ReferrersRepo string

+ TUFClient tuf.Downloader

Jul 16, 2024

Changes in this version

type Policy

+ ResolvedName string

Jun 21, 2024

Changes in this version

+ func CreateAttestationResolver(resolver oci.ImageDetailsResolver, mapping *config.PolicyMapping) (oci.AttestationResolver, error)

+ func CreateImageDetailsResolver(imageSource *oci.ImageSpec) (oci.ImageDetailsResolver, error)

type Policy

+ Mapping *config.PolicyMapping

type PolicyOptions

+ AttestationStyle config.AttestationStyle

+ PolicyId string

+ ReferrersRepo string

May 22, 2024

Changes in this version

+ const DefaultQuery

+ type Policy struct

+ InputFiles []*PolicyFile

+ Query string

type PolicyEvaluator

+ func GetMockPolicy() PolicyEvaluator

type PolicyMapping

+ Files []PolicyMappingFile

+ Id string

+ type PolicyMappingFile struct

+ Path string

type PolicyMappings

+ func LoadLocalMappings(opts *PolicyOptions) (*PolicyMappings, error)

type PolicyMirror

+ PolicyId string

+ type Result struct

+ Success bool

+ Summary Summary

+ Violations []Violation

+ func AllowedResult() *Result

+ type Summary struct

+ PolicyURI string

+ SLSALevels []string

+ Subjects []intoto.Subject

+ Verifier string

+ type Violation struct

+ Attestation *intoto.Statement

+ Description string

+ Details map[string]any

+ Type string

Apr 22, 2024

Changes in this version

+ const PolicyMappingFileName

+ var PolicyEvaluatorCtxKey policyEvaluatorCtxKeyType

+ var PolicyFileNames = []string

+ func RegoFunctions(resolver oci.AttestationResolver) []*tester.Builtin

+ func WithPolicyEvaluator(ctx context.Context, pe PolicyEvaluator) context.Context

+ type MirrorSpec struct

+ Domains []string

+ Prefix string

+ type MockPolicyEvaluator struct

+ EvaluateFunc func(ctx context.Context, resolver oci.AttestationResolver, policy []*PolicyFile, ...) error

+ func (pe *MockPolicyEvaluator) Evaluate(ctx context.Context, resolver oci.AttestationResolver, policy []*PolicyFile, ...) error

+ type PolicyEvaluator interface

+ Evaluate func(ctx context.Context, resolver oci.AttestationResolver, policy []*PolicyFile, ...) error

+ func GetPolicyEvaluator(ctx context.Context) (PolicyEvaluator, error)

+ func NewRegoEvaluator(debug bool) PolicyEvaluator

+ type PolicyFile struct

+ Content []byte

+ Path string

+ func ResolvePolicy(ctx context.Context, resolver oci.AttestationResolver, opts *PolicyOptions) ([]*PolicyFile, error)

+ type PolicyInput struct

+ Digest string

+ IsCanonical bool

+ Purl string

+ type PolicyMapping struct

+ Description string

+ Location string

+ Name string

+ Origin PolicyOrigin

+ type PolicyMappings struct

+ Kind string

+ Mirrors []PolicyMirror

+ Policies []PolicyMapping

+ Version string

+ type PolicyMirror struct

+ Mirror MirrorSpec

+ Name string

+ type PolicyOptions struct

+ LocalPolicyDir string

+ LocalTargetsDir string

+ TufClient tuf.TUFClient

+ type PolicyOrigin struct

+ Domain string

+ Name string

+ Prefix string