Directories
¶
| Path | Synopsis |
|---|---|
|
Package cidigest computes the CI config content digest the platform and the CLI compare to decide whether a branch may reuse the platform snapshot's resolved config: a content-keyed (not branch-keyed) identity for a project's CI config, made of the root file plus every LOCAL include statically reachable from it.
|
Package cidigest computes the CI config content digest the platform and the CLI compare to decide whether a branch may reuse the platform snapshot's resolved config: a content-keyed (not branch-keyed) identity for a project's CI config, made of the root file plus every LOCAL include statically reachable from it. |
|
engine
|
|
|
opa
Package opa hosts the Rego engine: it compiles the embedded policies, evaluates them over the intermediate representation and the projected configuration, and returns findings with their source locations.
|
Package opa hosts the Rego engine: it compiles the embedded policies, evaluates them over the intermediate representation and the projected configuration, and returns findings with their source locations. |
|
Package expr evaluates GitHub Actions style `if:` conditions under three-valued logic.
|
Package expr evaluates GitHub Actions style `if:` conditions under three-valued logic. |
|
Package ir is the provider-neutral intermediate representation of a pipeline: jobs, images, includes, branches, variables and settings in the one shape every Rego policy reads, built by the gitlab and github packages.
|
Package ir is the provider-neutral intermediate representation of a pipeline: jobs, images, includes, branches, variables and settings in the one shape every Rego policy reads, built by the gitlab and github packages. |
|
Package platform is the CLI side of the platform link: the /context read that a linked run starts from (policies, snapshot lanes, dismissals), the run context that records what the platform served, and the HTTP client with its OIDC token exchange.
|
Package platform is the CLI side of the platform link: the /context read that a linked run starts from (policies, snapshot lanes, dismissals), the run context that records what the platform served, and the HTTP client with its OIDC token exchange. |
|
Package runcache keeps the JSON report of the last analysis of each project in the user cache directory, so a later command can read it back without running the analysis again.
|
Package runcache keeps the JSON report of the last analysis of each project in the user cache directory, so a later command can read it back without running the analysis again. |
|
This file names the command-line tools GitHub's own hosted runner images ship by default, per image: a download a workflow only reaches when that tool is absent (a `command -v X ||` guard and the like) never runs at all on a runner where X is already on PATH.
|
This file names the command-line tools GitHub's own hosted runner images ship by default, per image: a download a workflow only reaches when that tool is absent (a `command -v X ||` guard and the like) never runs at all on a runner where X is already on PATH. |
|
testsupport
|
|
|
pipelines
Package pipelines builds ir.NormalizedPipeline values from CI files for tests, so the controls' tests, the situation tests and the control package's corpus share one reading of the YAML instead of three copies.
|
Package pipelines builds ir.NormalizedPipeline values from CI files for tests, so the controls' tests, the situation tests and the control package's corpus share one reading of the YAML instead of three copies. |
Click to show internal directories.
Click to hide internal directories.