securitypolicy

Documentation

Index

• Constants
• func EnforceStrictProduction(component string, hasUnsafeOverrides bool) error
• func StrictProductionEnabled() bool
• func ValidateRemoteExecution(frozen, insecureAllowUnpinned bool) error
• type ExecutionPolicy
  • func (p ExecutionPolicy) Enforce() error

Constants

const StrictProductionEnvVar = "EPACK_STRICT_PRODUCTION"

StrictProductionEnvVar enables strict production mode when set to true/1.

Functions

func EnforceStrictProduction

func EnforceStrictProduction(component string, hasUnsafeOverrides bool) error

EnforceStrictProduction blocks insecure execution overrides in strict production mode.

func StrictProductionEnabled

func StrictProductionEnabled() bool

StrictProductionEnabled returns true when strict production mode is enabled.

func ValidateRemoteExecution

func ValidateRemoteExecution(frozen, insecureAllowUnpinned bool) error

ValidateRemoteExecution is a compatibility wrapper around ExecutionPolicy.

Types

type ExecutionPolicy

type ExecutionPolicy struct {
	Frozen        bool
	AllowUnpinned bool
}

ExecutionPolicy captures execution-time security mode for components that may allow unpinned execution.

func (ExecutionPolicy) Enforce

func (p ExecutionPolicy) Enforce() error

Enforce validates policy invariants.