policy

type EvaluationResult struct {
	VerifiedLevels slsa.SourceVerifiedLevels
	PolicyPath     string
	// Shortfall is non-nil when the achieved SLSA source level is below the
	// policy's target level.
	Shortfall *PolicyShortfall
}

type OrgStatusCheckControl struct {

	// The property to record in the VSA if the conditions are met.
	// MUST start with `ORG_SOURCE_`.
	// We'll overide this with slsa.ControlName
	PropertyName string `protobuf:"bytes,1,opt,name=property_name,json=propertyName,proto3" json:"property_name,omitempty"`
	// These controls have their own start time to enable orgs to enable
	// new ones without violating continuity on other controls.
	Since *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=since,proto3" json:"since,omitempty"`
	// The name of the 'Status Check' as reported in the GitHub UI & API.
	CheckName string `protobuf:"bytes,3,opt,name=check_name,json=checkName,proto3" json:"check_name,omitempty"`
	// contains filtered or unexported fields
}

type PolicyEvaluator struct {
	// UNSAFE!
	// Instead of grabbing the policy from the canonical repo, use the policy at this path instead.
	UseLocalPolicy string
	// contains filtered or unexported fields
}

type PolicyShortfall struct {
	TargetLevel   slsa.SlsaSourceLevel
	AchievedLevel slsa.SlsaSourceLevel
	Reason        string
}

type ProtectedBranch struct {
	Name  string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Since *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=since,proto3" json:"since,omitempty"`
	// We override this string with slsa.SlsaSourceLevel
	TargetSlsaSourceLevel  string                   `` /* 128-byte string literal not displayed */
	RequireReview          bool                     `protobuf:"varint,4,opt,name=require_review,json=requireReview,proto3" json:"require_review,omitempty"`
	OrgStatusCheckControls []*OrgStatusCheckControl `protobuf:"bytes,5,rep,name=org_status_check_controls,proto3" json:"org_status_check_controls,omitempty"`
	// contains filtered or unexported fields
}

type ProtectedTag struct {
	Since      *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=since,proto3" json:"since,omitempty"`
	TagHygiene bool                   `protobuf:"varint,2,opt,name=tag_hygiene,json=tagHygiene,proto3" json:"tag_hygiene,omitempty"`
	// contains filtered or unexported fields
}

type RepoPolicy struct {
	CanonicalRepo     string             `protobuf:"bytes,1,opt,name=canonical_repo,proto3" json:"canonical_repo,omitempty"`
	ProtectedBranches []*ProtectedBranch `protobuf:"bytes,2,rep,name=protected_branches,proto3" json:"protected_branches,omitempty"`
	ProtectedTag      *ProtectedTag      `protobuf:"bytes,3,opt,name=protected_tag,json=protectedTag,proto3,oneof" json:"protected_tag,omitempty"`
	// contains filtered or unexported fields
}