a4c3bd07fe
* Add rewrite support and fix existing tests * Add unit tests for policy matching * Compile regexes up front and store policies in map * Add test for verify flow with mirror * Rename ImageName -> ResolvedName And only set it when necessary * Rename Rewrite -> Replacement but keep it as rewrite in the yaml
55 lines
1.3 KiB
Go
55 lines
1.3 KiB
Go
package policy
|
|
|
|
import (
|
|
"github.com/docker/attest/pkg/config"
|
|
"github.com/docker/attest/pkg/tuf"
|
|
intoto "github.com/in-toto/in-toto-golang/in_toto"
|
|
)
|
|
|
|
type Summary struct {
|
|
Subjects []intoto.Subject `json:"subjects"`
|
|
SLSALevels []string `json:"slsa_levels"`
|
|
Verifier string `json:"verifier"`
|
|
PolicyURI string `json:"policy_uri"`
|
|
}
|
|
|
|
type Violation struct {
|
|
Type string `json:"type"`
|
|
Description string `json:"description"`
|
|
Attestation *intoto.Statement `json:"attestation"`
|
|
Details map[string]any `json:"details"`
|
|
}
|
|
|
|
type Result struct {
|
|
Success bool `json:"success"`
|
|
Violations []Violation `json:"violations"`
|
|
Summary Summary `json:"summary"`
|
|
}
|
|
|
|
type PolicyOptions struct {
|
|
TufClient tuf.TUFClient
|
|
LocalTargetsDir string
|
|
LocalPolicyDir string
|
|
PolicyId string
|
|
ReferrersRepo string
|
|
AttestationStyle config.AttestationStyle
|
|
}
|
|
|
|
type Policy struct {
|
|
InputFiles []*PolicyFile
|
|
Query string
|
|
Mapping *config.PolicyMapping
|
|
ResolvedName string
|
|
}
|
|
|
|
type PolicyInput struct {
|
|
Digest string `json:"digest"`
|
|
Purl string `json:"purl"`
|
|
IsCanonical bool `json:"isCanonical"`
|
|
}
|
|
|
|
type PolicyFile struct {
|
|
Path string
|
|
Content []byte
|
|
}
|