Documentation
¶
Index ¶
- Constants
- Variables
- func CreateAttestationResolver(resolver oci.ImageDetailsResolver, mapping *config.PolicyMapping) (attestation.Resolver, error)
- func CreateImageDetailsResolver(imageSource *oci.ImageSpec) (oci.ImageDetailsResolver, error)
- func RegoFunctions(resolver attestation.Resolver) []*tester.Builtin
- func WithPolicyEvaluator(ctx context.Context, pe Evaluator) context.Context
- type Evaluator
- type File
- type Input
- type MockPolicyEvaluator
- type Options
- type Policy
- type Resolver
- type Result
- type Summary
- type Violation
Constants ¶
View Source
const (
DefaultQuery = "result := data.attest.result"
)
Variables ¶
View Source
var PolicyEvaluatorCtxKey policyEvaluatorCtxKeyType
Functions ¶
func CreateAttestationResolver ¶ added in v0.1.5
func CreateAttestationResolver(resolver oci.ImageDetailsResolver, mapping *config.PolicyMapping) (attestation.Resolver, error)
func CreateImageDetailsResolver ¶ added in v0.1.5
func CreateImageDetailsResolver(imageSource *oci.ImageSpec) (oci.ImageDetailsResolver, error)
func RegoFunctions ¶
func RegoFunctions(resolver attestation.Resolver) []*tester.Builtin
Types ¶
type Evaluator ¶ added in v0.2.0
type Evaluator interface {
Evaluate(ctx context.Context, resolver attestation.Resolver, pctx *Policy, input *Input) (*Result, error)
}
func GetMockPolicy ¶ added in v0.1.4
func GetMockPolicy() Evaluator
func GetPolicyEvaluator ¶
gets PolicyEvaluator from context, defaults to Rego PolicyEvaluator if not set.
func NewRegoEvaluator ¶
type MockPolicyEvaluator ¶
type Options ¶ added in v0.2.0
type Options struct {
TUFClientOptions *tuf.ClientOptions
DisableTUF bool
LocalTargetsDir string
LocalPolicyDir string
PolicyID string
ReferrersRepo string
AttestationStyle config.AttestationStyle
}
type Resolver ¶ added in v0.4.0
type Resolver struct {
// contains filtered or unexported fields
}
func NewResolver ¶ added in v0.4.0
func NewResolver(tufClient tuf.Downloader, opts *Options) *Resolver
type Result ¶ added in v0.1.4
type Result struct {
Success bool `json:"success"`
Violations []Violation `json:"violations"`
Summary Summary `json:"summary"`
}
func AllowedResult ¶ added in v0.1.4
func AllowedResult() *Result
Click to show internal directories.
Click to hide internal directories.