Tonis Tiigi
4880756a0f
policy: simplify recursive material resolution
...
Unify root/material unknown resolution with recursive Input traversal.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 09:14:25 -08:00
Tonis Tiigi
ac9e4c512c
policy: add artifact attestation builtin support
...
Add artifact_attestation(http, filename) and wire verifier support for
artifact bundle checks. Add docker_github_builder_bundle helper rule.
Handle runtime unknown http.checksum after eval so metadata resolve is
requested when checksum is missing.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-20 08:56:39 -08:00
Tonis Tiigi
8d605dcd87
policy: add image.provenance input type
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-12 11:59:06 -08:00
Tonis Tiigi
df542b3f80
policy: add testcases for !hasProvenance and sha256 git
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-09 18:27:34 -08:00
Tonis Tiigi
6d2e4952b5
policy: add mock signature unit test
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-09 18:27:29 -08:00
Tonis Tiigi
22b3d36de3
policy: add unit tests for SourceToInput
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-09 16:30:25 -08:00
Tonis Tiigi