Tonis Tiigi
5ad09ce3eb
commands: implement policy eval command
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:33 -08:00
Tonis Tiigi
d0e9e8cab5
policy: add pin_image helper
...
This helper can be used to pin images to specific digest to opt-out
out upgrades or replay old builds.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
df5d9eb8c2
policy: update verify_git_signature to take git object as parameter
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
8906b254d3
policy: move custom functions to separate file
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
87d4189039
policy: image signature verification support
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
b2697ae933
policy: add git signature verification support
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
1b7a5f2fa9
policy: add custom builtin load_json
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
70da643c58
policy: add helper modules loading
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
7247c1e38e
policy: print debug helper
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
547f1ab36b
policy: add custom builtins list and remove v0 compat
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:41 -08:00
Tonis Tiigi
adb9386282
policy: remove http perm/uid/gid
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:41 -08:00
Tonis Tiigi
93341aaeee
add rego integration to source policies
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:40 -08:00
Tonis Tiigi