policy: add docker_github_builder builtin helper

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
parent 30260ec935
commit 1d19f3e2dd
4 changed files with 118 additions and 0 deletions
@@ -195,6 +195,13 @@ func loadPolicyModules(root fs.StatFS, filename string) (map[string]*ast.Module,
 	modules := map[string]*ast.Module{
 		filepath.ToSlash(policyFile): mod,
 	}
+	builtinMod, err := builtinPolicyModuleAST()
+	if err != nil {
+		return nil, nil, errors.Wrapf(err, "parse builtin policy module %s", builtinPolicyModuleFilename)
+	}
+	if _, ok := modules[builtinPolicyModuleFilename]; !ok {
+		modules[builtinPolicyModuleFilename] = builtinMod
+	}
 	files := []File{
 		{
 			Filename: filepath.ToSlash(policyFile),