a4c3bd07fe
* Add rewrite support and fix existing tests * Add unit tests for policy matching * Compile regexes up front and store policies in map * Add test for verify flow with mirror * Rename ImageName -> ResolvedName And only set it when necessary * Rename Rewrite -> Replacement but keep it as rewrite in the yaml
19 lines
510 B
YAML
19 lines
510 B
YAML
version: v1
|
|
kind: policy-mapping
|
|
policies:
|
|
- id: docker-official-images
|
|
description: Docker Official Images
|
|
files:
|
|
- path: doi/policy.rego
|
|
rules:
|
|
- pattern: "^docker[.]io/library/(.*)$"
|
|
policy-id: docker-official-images
|
|
- pattern: "repo$"
|
|
policy-id: docker-official-images
|
|
- pattern: "test-image$"
|
|
policy-id: docker-official-images
|
|
- pattern: "image-signer-verifier-test$"
|
|
policy-id: docker-official-images
|
|
- pattern: "library/(.*)$"
|
|
rewrite: docker.io/library/$1
|