rego

Documentation

Index

• Constants
• func ValidateJSON(jsonBody []byte, entrypoints []string) []error
• func ValidateJSONWithModuleInput(jsonBody []byte, moduleInput string) (warnings error, errors error)
• type CosignRuleResult

Constants

const CosignEvaluationRule = "isCompliant"

CosignEvaluationRule defines the expected evaluation role of a provided rego module

const CosignRegoPackageName = "sigstore"

CosignRegoPackageName defines the expected package name of a provided rego module

const QUERY = "data.signature.allow"

The query below should meet the following requirements: * Provides no Bindings. Do not use a query that sets a variable, e.g. x := data.signature.allow * Queries for a single value.

Functions

func ValidateJSON

func ValidateJSON(jsonBody []byte, entrypoints []string) []error

func ValidateJSONWithModuleInput

func ValidateJSONWithModuleInput(jsonBody []byte, moduleInput string) (warnings error, errors error)

ValidateJSONWithModuleInput takes the body of the results to evaluate and the defined module in a policy to validate against the input data

Types

type CosignRuleResult

type CosignRuleResult struct {
	Warning string `json:"warning,omitempty"`
	Error   string `json:"error,omitempty"`
	Result  bool   `json:"result,omitempty"`
}

CosignRuleResult defines a expected result object when wrapping the custom messages of the result of our cosign rego rule