opaprocessor

Documentation

Index

• Constants
• func ConvertFrameworksToPolicies(frameworks []reporthandling.Framework, version string, ...) *cautils.Policies
• func ConvertFrameworksToSummaryDetails(summaryDetails *reportsummary.SummaryDetails, ...)
• type IJobProgressNotificationClient
• type OPAProcessor
  • func NewOPAProcessor(sessionObj *cautils.OPASessionObj, ...) *OPAProcessor
  • func (opap *OPAProcessor) Process(ctx context.Context, policies *cautils.Policies, ...) error
  • func (opap *OPAProcessor) ProcessRulesListener(ctx context.Context, progressListener IJobProgressNotificationClient, ...) error
• type VerifyCommand

Constants

const ScoreConfigPath = "/resources/config"

Functions

func ConvertFrameworksToPolicies

func ConvertFrameworksToPolicies(frameworks []reporthandling.Framework, version string, excludedRules map[string]bool, scanningScope reporthandling.ScanningScopeType) *cautils.Policies

ConvertFrameworksToPolicies convert list of frameworks to list of policies

func ConvertFrameworksToSummaryDetails

func ConvertFrameworksToSummaryDetails(summaryDetails *reportsummary.SummaryDetails, frameworks []reporthandling.Framework, policies *cautils.Policies)

ConvertFrameworksToSummaryDetails initialize the summary details for the report object

Types

type IJobProgressNotificationClient

type IJobProgressNotificationClient interface {
	Start(allSteps int)
	ProgressJob(step int, message string)
	Stop()
}

type OPAProcessor

type OPAProcessor struct {
	*cautils.OPASessionObj
	// contains filtered or unexported fields
}

OPAProcessor processes Open Policy Agent rules.

func NewOPAProcessor

func NewOPAProcessor(sessionObj *cautils.OPASessionObj, regoDependenciesData *resources.RegoDependenciesData, clusterName string) *OPAProcessor

func (*OPAProcessor) Process

func (opap *OPAProcessor) Process(ctx context.Context, policies *cautils.Policies, progressListener IJobProgressNotificationClient) error

Process OPA policies (rules) on all configured controls.

func (*OPAProcessor) ProcessRulesListener

func (opap *OPAProcessor) ProcessRulesListener(ctx context.Context, progressListener IJobProgressNotificationClient, ScanInfo *cautils.ScanInfo) error

type VerifyCommand

type VerifyCommand struct {
	options.RegistryOptions
	Annotations                  sigs.AnnotationsMap
	CertChain                    string
	CertEmail                    string
	CertOidcProvider             string
	CertIdentity                 string
	CertOidcIssuer               string
	CertGithubWorkflowTrigger    string
	CertGithubWorkflowSha        string
	CertGithubWorkflowName       string
	KeyRef                       string
	CertGithubWorkflowRef        string
	SignatureRef                 string
	CertRef                      string
	CertGithubWorkflowRepository string
	Attachment                   string
	Slot                         string
	Output                       string
	RekorURL                     string
	HashAlgorithm                crypto.Hash
	Sk                           bool
	CheckClaims                  bool
	LocalImage                   bool
	EnforceSCT                   bool
}

VerifyCommand verifies a signature on a supplied container image