configpolicy

Documentation

Index

• type PolicyEnforcer
  • func (enforcer PolicyEnforcer) ContinueVerifyOnFailure(_ context.Context, _ common.Reference, ...) bool
  • func (enforcer PolicyEnforcer) ErrorToVerifyResult(_ context.Context, subjectRefString string, verifyError error) types.VerifyResult
  • func (enforcer PolicyEnforcer) GetPolicyType(_ context.Context) string
  • func (enforcer PolicyEnforcer) OverallVerifyResult(_ context.Context, verifierReports []interface{}) bool
  • func (enforcer PolicyEnforcer) VerifyNeeded(_ context.Context, _ common.Reference, _ ocispecs.ReferenceDescriptor) bool

Types

type PolicyEnforcer

type PolicyEnforcer struct {
	ArtifactTypePolicies map[string]vt.ArtifactTypeVerifyPolicy
}

PolicyEnforcer describes different polices that are enforced during verification

func (PolicyEnforcer) ContinueVerifyOnFailure

func (enforcer PolicyEnforcer) ContinueVerifyOnFailure(_ context.Context, _ common.Reference, referenceDesc ocispecs.ReferenceDescriptor, _ types.VerifyResult) bool

ContinueVerifyOnFailure determines if the given error can be ignored and verification can be continued.

func (PolicyEnforcer) ErrorToVerifyResult

func (enforcer PolicyEnforcer) ErrorToVerifyResult(_ context.Context, subjectRefString string, verifyError error) types.VerifyResult

ErrorToVerifyResult converts an error to a properly formatted verify result

func (PolicyEnforcer) GetPolicyType

func (enforcer PolicyEnforcer) GetPolicyType(_ context.Context) string

GetPolicyType returns the type of the policy.

func (PolicyEnforcer) OverallVerifyResult

func (enforcer PolicyEnforcer) OverallVerifyResult(_ context.Context, verifierReports []interface{}) bool

OverallVerifyResult determines the final outcome of verification that is constructed using the results from individual verifications

func (PolicyEnforcer) VerifyNeeded

func (enforcer PolicyEnforcer) VerifyNeeded(_ context.Context, _ common.Reference, _ ocispecs.ReferenceDescriptor) bool

VerifyNeeded determines if the given subject/reference artifact should be verified