attest/policy/testdata/policies/allow/mapping.yaml

# map repos to policies
version: v1
kind: policy-mapping
policies:
  - id: docker-official-images
    description: Docker Official Images
    attestations:
      repo: "localhost:5001/library-refs"
    files:
      - path: doi/policy.rego
rules:
  - pattern: "^docker[.]io/library/(.*)$"
    policy-id: docker-official-images
  - pattern: ^localhost:5001/(.*)$
    rewrite: docker.io/library/$1
  - pattern: ^registry[.]local:5000/(.*)$
    rewrite: docker.io/library/$1
feat: add policy, oci, attestation 2024-04-22 12:22:15 -05:00			`# map repos to policies`
			`version: v1`
			`kind: policy-mapping`
			`policies:`
Add proper mirror support (#74) * Add rewrite support and fix existing tests * Add unit tests for policy matching * Compile regexes up front and store policies in map * Add test for verify flow with mirror * Rename ImageName -> ResolvedName And only set it when necessary * Rename Rewrite -> Replacement but keep it as rewrite in the yaml 2024-07-12 17:09:41 +01:00			`- id: docker-official-images`
Return VSA and rich errors from verification (#38) * Start of richer results from verification * Pull out VSA code from signing * Expose attestation signing fns * Add VSA test * Notes for policy result * Require separate policy for VSA creation * Load test signing key from tests * Return rich object from policy * Add result object schema and fix tests * Ensure example test runs * Remove data.yaml files from mock policies * Don't run example - TUF policy isn't compatible * Add attestation to manifests for all subjects * Ensure adding attestation doesn't touch statements * Don't export sign function * Remove attestations from VerificationResult * Change bool to Outcome enum in result * Use outputLayout directly * Make clearer that Outcome strings are for VSA * Return multiple SLSA levels from policy * Fix unmarshalling of policy-id (#39) * Rename function * Rename policy.VerificationResult -> policy.Result * Re-add test for canonical input --------- Co-authored-by: James Carnegie <james.carnegie@docker.com> Co-authored-by: James Carnegie <kipz@users.noreply.github.com> 2024-05-22 14:49:23 +01:00			`description: Docker Official Images`
Add proper mirror support (#74) * Add rewrite support and fix existing tests * Add unit tests for policy matching * Compile regexes up front and store policies in map * Add test for verify flow with mirror * Rename ImageName -> ResolvedName And only set it when necessary * Rename Rewrite -> Replacement but keep it as rewrite in the yaml 2024-07-12 17:09:41 +01:00			`attestations:`
			`repo: "localhost:5001/library-refs"`
Use policy files from mapping.yaml (#30) * Use policy files from mapping.yaml * Rename location to root in mapping.yaml * Remove location/root 2024-05-16 14:49:57 +01:00			`files:`
			`- path: doi/policy.rego`
Add proper mirror support (#74) * Add rewrite support and fix existing tests * Add unit tests for policy matching * Compile regexes up front and store policies in map * Add test for verify flow with mirror * Rename ImageName -> ResolvedName And only set it when necessary * Rename Rewrite -> Replacement but keep it as rewrite in the yaml 2024-07-12 17:09:41 +01:00			`rules:`
			`- pattern: "^docker[.]io/library/(.*)$"`
			`policy-id: docker-official-images`
			`- pattern: ^localhost:5001/(.*)$`
			`rewrite: docker.io/library/$1`
			`- pattern: ^registry[.]local:5000/(.*)$`
			`rewrite: docker.io/library/$1`