attest/pkg/policy/testdata/mock-tuf-allow/mapping.yaml

# map repos to policies
version: v1
kind: policy-mapping
policies:
  - origin:
      domain: docker.io
      prefix: library/
    id: docker-official-images
    description: Docker Official Images
    attestations:
      repo: "localhost:5001/library-refs"
    files:
      - path: doi/policy.rego
mirrors:
  - policy-id: docker-official-images
    mirror:
      domains: [localhost:5001, registry.local:5000]
      prefix: ""
feat: add policy, oci, attestation 2024-04-22 12:22:15 -05:00			`# map repos to policies`
			`version: v1`
			`kind: policy-mapping`
			`policies:`
			`- origin:`
			`domain: docker.io`
			`prefix: library/`
Use id/policy-id in mapping.yaml (#32) 2024-05-16 15:34:19 +01:00			`id: docker-official-images`
feat: add policy, oci, attestation 2024-04-22 12:22:15 -05:00			`description: Docker Official Images`
Add support for separate attestation storage repo (#62) * Add support for separate attestation storage repo * Move mapping file types and parsing to config package * Change signature of Verify to take image/platform * Separate Attestation Resolvers to their own files (registry, layout and referrers) * Add support configuring referrers resolution style in mapping.yaml * Add registry test 2024-06-21 11:29:16 +01:00			`attestations:`
			`repo: "localhost:5001/library-refs"`
Use policy files from mapping.yaml (#30) * Use policy files from mapping.yaml * Rename location to root in mapping.yaml * Remove location/root 2024-05-16 14:49:57 +01:00			`files:`
			`- path: doi/policy.rego`
Return VSA and rich errors from verification (#38) * Start of richer results from verification * Pull out VSA code from signing * Expose attestation signing fns * Add VSA test * Notes for policy result * Require separate policy for VSA creation * Load test signing key from tests * Return rich object from policy * Add result object schema and fix tests * Ensure example test runs * Remove data.yaml files from mock policies * Don't run example - TUF policy isn't compatible * Add attestation to manifests for all subjects * Ensure adding attestation doesn't touch statements * Don't export sign function * Remove attestations from VerificationResult * Change bool to Outcome enum in result * Use outputLayout directly * Make clearer that Outcome strings are for VSA * Return multiple SLSA levels from policy * Fix unmarshalling of policy-id (#39) * Rename function * Rename policy.VerificationResult -> policy.Result * Re-add test for canonical input --------- Co-authored-by: James Carnegie <james.carnegie@docker.com> Co-authored-by: James Carnegie <kipz@users.noreply.github.com> 2024-05-22 14:49:23 +01:00			`mirrors:`
			`- policy-id: docker-official-images`
			`mirror:`
			`domains: [localhost:5001, registry.local:5000]`
			`prefix: ""`