docker/attest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: canonical policy

Browse Source
This commit is contained in:
mrjoelkamp
2024-05-17 09:29:06 -05:00
parent ec1c994f04
commit 0020ece3b4
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/policy/policy_test.go
View File

@@ -65,7 +65,7 @@ func TestRegoEvaluator_Evaluate(t *testing.T) {
{repo: "testdata/mock-tuf-wrong-key", expectSuccess: false, input: defaultInput, resolver: defaultResolver}, {repo: "testdata/mock-tuf-wrong-key", expectSuccess: false, input: defaultInput, resolver: defaultResolver},
{repo: MockTufRepo, expectSuccess: true, input: &policy.PolicyInput{ {repo: MockTufRepo, expectSuccess: true, input: &policy.PolicyInput{
Digest: "sha256:da8b190665956ea07890a0273e2a9c96bfe291662f08e2860e868eef69c34620", Digest: "sha256:da8b190665956ea07890a0273e2a9c96bfe291662f08e2860e868eef69c34620",
Purl: "pkg:docker/test-image@test?platform=linux%2Famd64", Purl: "pkg:docker/test-image?digest=sha256%da8b190665956ea07890a0273e2a9c96bfe291662f08e2860e868eef69c34620&platform=linux%2Famd64",
IsCanonical: true, IsCanonical: true,
}, resolver: vsaResolver}, }, resolver: vsaResolver},
{repo: MockTufRepo, expectSuccess: true, input: &policy.PolicyInput{ {repo: MockTufRepo, expectSuccess: true, input: &policy.PolicyInput{

4
test/testdata/local-policy/doi/policy.rego vendored
View File

@@ -35,12 +35,12 @@ valid_subject(sub) if {
} }
valid_subject_name(name) if { valid_subject_name(name) if {
input.canonical input.isCanonical
print("is canonical, ignoring name") print("is canonical, ignoring name")
} }
valid_subject_name(name) if { valid_subject_name(name) if {
not input.canonical not input.isCanonical
print("valid_subject_name...") print("valid_subject_name...")
print("name:", name) print("name:", name)
print("input.purl:", input.purl) print("input.purl:", input.purl)