rego

Documentation

Index

• type EnvironmentMode
  • func (em EnvironmentMode) Capabilities() *ast.Capabilities
• type Rego
  • func (r *Rego) Verify(ctx context.Context, policy *engine.Policy, input []byte, args map[string]any) (*engine.EvaluationResult, error)

Types

type EnvironmentMode

type EnvironmentMode int32

EnvironmentMode defines the mode of running the policy engine

const (
	// EnvironmentModeRestrictive restricts operations that the compiler can do
	EnvironmentModeRestrictive EnvironmentMode = 0
	// EnvironmentModePermissive allows all operations on the compiler
	EnvironmentModePermissive EnvironmentMode = 1
)

func (EnvironmentMode) Capabilities

func (em EnvironmentMode) Capabilities() *ast.Capabilities

Capabilities returns the capabilities of the environment based on the mode of operation defaulting to EnvironmentModeRestrictive if not provided.

type Rego

type Rego struct {
	// OperatingMode defines the mode of running the policy engine
	// by restricting or not the operations allowed by the compiler
	OperatingMode EnvironmentMode
}

Rego policy checker for chainloop attestations and materials

func (*Rego) Verify

func (r *Rego) Verify(ctx context.Context, policy *engine.Policy, input []byte, args map[string]any) (*engine.EvaluationResult, error)