docker/attest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #37 from docker/fix-is-canonical-policy

Browse Source 
fix: canonical policy
This commit is contained in:
Joel Kamp
2024-05-17 09:34:27 -05:00
committed by GitHub
parent ec1c994f04 0020ece3b4
commit c416c11e10
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/policy/policy_test.go
View File

@@ -65,7 +65,7 @@ func TestRegoEvaluator_Evaluate(t *testing.T) {
{repo: "testdata/mock-tuf-wrong-key", expectSuccess: false, input: defaultInput, resolver: defaultResolver},
{repo: MockTufRepo, expectSuccess: true, input: &policy.PolicyInput{
Digest: "sha256:da8b190665956ea07890a0273e2a9c96bfe291662f08e2860e868eef69c34620",
Purl: "pkg:docker/test-image@test?platform=linux%2Famd64",
Purl: "pkg:docker/test-image?digest=sha256%da8b190665956ea07890a0273e2a9c96bfe291662f08e2860e868eef69c34620&platform=linux%2Famd64",
IsCanonical: true,
}, resolver: vsaResolver},
{repo: MockTufRepo, expectSuccess: true, input: &policy.PolicyInput{

4
test/testdata/local-policy/doi/policy.rego vendored
View File

@@ -35,12 +35,12 @@ valid_subject(sub) if {
}
valid_subject_name(name) if {
input.canonical
input.isCanonical
print("is canonical, ignoring name")
}
valid_subject_name(name) if {
not input.canonical
not input.isCanonical
print("valid_subject_name...")
print("name:", name)
print("input.purl:", input.purl)