Tonis Tiigi and CrazyMax
4da04e3bf4
policy: enable proxy network from source policy caps
...
Evaluate source policy caps before solve requests so policies can enable
BuildKit proxy networking. Policy can return caps {"exec.proxy": true}
during the caps request to enable proxy network
support for the solve.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-10 15:04:23 +02:00
Tonis Tiigi
a57372e966
policy: add HTTP PGP signature verification builtin
...
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-26 15:39:46 -07:00
Tonis Tiigi
4880756a0f
policy: simplify recursive material resolution
...
Unify root/material unknown resolution with recursive Input traversal.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 09:14:25 -08:00
Tonis Tiigi
8d605dcd87
policy: add image.provenance input type
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-12 11:59:06 -08:00
Tonis Tiigi
eaee6675fb
policy: fix exposing signature kind and type
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:53 -08:00
Tonis Tiigi
c6ecdc08cf
commands: implement policy test command
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 10:31:12 -08:00
Tonis Tiigi
87d4189039
policy: image signature verification support
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
b2697ae933
policy: add git signature verification support
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:42 -08:00
Tonis Tiigi
adb9386282
policy: remove http perm/uid/gid
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:41 -08:00
Tonis Tiigi
93341aaeee
add rego integration to source policies
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:03:40 -08:00
