policies

Documentation

Index

• func LoadPolicyScriptFromSpec(spec *v1.Policy) (*engine.Policy, error)
• func LoadPolicySpec(attachment *v1.PolicyAttachment) (*v1.Policy, error)
• func LogPolicyViolations(evaluations []*v12.PolicyEvaluation, logger *zerolog.Logger)
• type PolicyError
  • func NewPolicyError(err error) *PolicyError
  • func (e *PolicyError) Error() string
• type PolicyVerifier
  • func NewPolicyVerifier(schema *v1.CraftingSchema, logger *zerolog.Logger) *PolicyVerifier
  • func (pv *PolicyVerifier) VerifyMaterial(ctx context.Context, material *v12.Attestation_Material, artifactPath string) ([]*v12.PolicyEvaluation, error)
  • func (pv *PolicyVerifier) VerifyStatement(ctx context.Context, statement *intoto.Statement) ([]*v12.PolicyEvaluation, error)

Functions

func LoadPolicyScriptFromSpec

func LoadPolicyScriptFromSpec(spec *v1.Policy) (*engine.Policy, error)

LoadPolicyScriptFromSpec loads a policy referenced from the spec

func LoadPolicySpec

func LoadPolicySpec(attachment *v1.PolicyAttachment) (*v1.Policy, error)

LoadPolicySpec loads and validates a policy spec from a contract

func LogPolicyViolations

func LogPolicyViolations(evaluations []*v12.PolicyEvaluation, logger *zerolog.Logger)

Types

type PolicyError

type PolicyError struct {
	// contains filtered or unexported fields
}

func NewPolicyError

func NewPolicyError(err error) *PolicyError

func (*PolicyError) Error

func (e *PolicyError) Error() string

type PolicyVerifier

type PolicyVerifier struct {
	// contains filtered or unexported fields
}

func NewPolicyVerifier

func NewPolicyVerifier(schema *v1.CraftingSchema, logger *zerolog.Logger) *PolicyVerifier

func (*PolicyVerifier) VerifyMaterial

func (pv *PolicyVerifier) VerifyMaterial(ctx context.Context, material *v12.Attestation_Material, artifactPath string) ([]*v12.PolicyEvaluation, error)

VerifyMaterial applies all required policies to a material

func (*PolicyVerifier) VerifyStatement

func (pv *PolicyVerifier) VerifyStatement(ctx context.Context, statement *intoto.Statement) ([]*v12.PolicyEvaluation, error)

VerifyStatement verifies that the statement is compliant with the policies present in the schema