Tonis Tiigi 5c3551beeb policy: add GitHub attestation verification ...

Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.

Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>

2026-02-20 08:56:40 -08:00

..

add_unknowns_test.go

policy: add image.provenance input type

2026-02-12 11:59:06 -08:00

builtin_module.go

policy: add docker_github_builder_tag builtin helper

2026-01-16 11:48:55 -08:00

builtins.go

policy: print debug helper

2026-01-14 09:03:42 -08:00

builtins.rego

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00

funcs_artifact_test.go

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00

funcs.go

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00

git.go

policy: add git signature verification support

2026-01-14 09:03:42 -08:00

multipolicy_test.go

commands: implement policy eval command

2026-01-14 09:10:33 -08:00

multipolicy.go

policy: add multiple policy support

2026-01-14 09:09:10 -08:00

policy_error_test.go

policy: add progress vertex error integration test

2026-02-19 18:13:58 -08:00

provenance.go

policy: add image.provenance input type

2026-02-12 11:59:06 -08:00

signatures.go

policy: add artifact attestation builtin support

2026-02-20 08:56:39 -08:00

tester.go

policy: separate sourcemetaresolver utility to reusable pkg

2026-02-13 13:59:33 -08:00

types.go

policy: add image.provenance input type

2026-02-12 11:59:06 -08:00

utils_test.go

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00

validate_test.go

policy: add artifact attestation builtin support

2026-02-20 08:56:39 -08:00

validate.go

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00