webhook

Aug 9, 2023

Changes in this version

type PolicyAttestation

+ Digest string

Jan 29, 2023

Changes in this version

+ func GetIncludeObjectMeta(ctx context.Context) interface

+ func GetIncludeSpec(ctx context.Context) interface

+ func GetIncludeTypeMeta(ctx context.Context) interface

Dec 11, 2022

Changes in this version

+ func IncludeTypeMeta(ctx context.Context, meta interface{}) context.Context

type PolicyResult

+ TypeMeta interface{}

Dec 7, 2022

Changes in this version

+ func IncludeObjectMeta(ctx context.Context, meta interface{}) context.Context

+ func IncludeSpec(ctx context.Context, spec interface{}) context.Context

Dec 5, 2022

Changes in this version

type PolicyResult

+ Config map[string]*v1.ConfigFile

+ ObjectMeta interface{}

+ Spec interface{}

Oct 27, 2022

Changes in this version

type PolicySignature

+ ID string

Oct 11, 2022

Changes in this version

+ func ToContext(ctx context.Context, cache ResultCache) context.Context

+ type CacheResult struct

+ Errors []error

+ PolicyResult *PolicyResult

+ type NoCache struct

+ func (nc *NoCache) Get(ctx context.Context, image, uid, resourceVersion string) *CacheResult

+ func (nc *NoCache) Set(ctx context.Context, image, uid, resourceVersion string, ...)

+ type ResultCache interface

+ Get func(ctx context.Context, image, uid, resourceVersion string) *CacheResult

+ Set func(ctx context.Context, image, uid, resourceVersion string, ...)

+ func FromContext(ctx context.Context) ResultCache

Sep 7, 2022

Changes in this version

+ type PolicyAttestation struct

+ Payload []byte

+ PredicateType string

Aug 4, 2022

Changes in this version

type AuthorityMatch

+ Static bool

+ type GithubExtensions struct

+ WorkflowName string

+ WorkflowRef string

+ WorkflowRepo string

+ WorkflowSHA string

+ WorkflowTrigger string

Jul 22, 2022 GO-2022-0759

  GO-2022-0759: PolicyController before 0.2.1 may bypass attestation verification in github.com/sigstore/policy-controller

Jul 22, 2022 GO-2022-0759

  GO-2022-0759: PolicyController before 0.2.1 may bypass attestation verification in github.com/sigstore/policy-controller

Jul 22, 2022 GO-2022-0759

  GO-2022-0759: PolicyController before 0.2.1 may bypass attestation verification in github.com/sigstore/policy-controller

Jul 18, 2022 GO-2022-0759

  GO-2022-0759: PolicyController before 0.2.1 may bypass attestation verification in github.com/sigstore/policy-controller

Changes in this version

+ func ValidatePolicyAttestationsForAuthority(ctx context.Context, ref name.Reference, authority webhookcip.Authority, ...) (map[string][]PolicySignature, error)

+ type AuthorityMatch struct

+ Attestations map[string][]PolicySignature

+ Signatures []PolicySignature

+ type PolicyResult struct

+ AuthorityMatches map[string]AuthorityMatch

+ func ValidatePolicy(ctx context.Context, namespace string, ref name.Reference, ...) (*PolicyResult, []error)

+ type PolicySignature struct

+ Issuer string

+ Subject string

+ func ValidatePolicySignaturesForAuthority(ctx context.Context, ref name.Reference, authority webhookcip.Authority, ...) ([]PolicySignature, error)

+ type Validator struct

+ func NewValidator(ctx context.Context, secretName string) *Validator

+ func (v *Validator) ResolveCronJob(ctx context.Context, c *duckv1.CronJob)

+ func (v *Validator) ResolvePod(ctx context.Context, p *duckv1.Pod)

+ func (v *Validator) ResolvePodScalable(ctx context.Context, ps *policyduckv1beta1.PodScalable)

+ func (v *Validator) ResolvePodSpecable(ctx context.Context, wp *duckv1.WithPod)

+ func (v *Validator) ValidateCronJob(ctx context.Context, c *duckv1.CronJob) *apis.FieldError

+ func (v *Validator) ValidatePod(ctx context.Context, p *duckv1.Pod) *apis.FieldError

+ func (v *Validator) ValidatePodScalable(ctx context.Context, ps *policyduckv1beta1.PodScalable) *apis.FieldError

+ func (v *Validator) ValidatePodSpecable(ctx context.Context, wp *duckv1.WithPod) *apis.FieldError