policy.yaml.tmpl

{{- $name := .Env.NAME -}}{{- range ds "data" -}}{{- if eq .name $name -}}
#
{{ if index . "deprecated" -}}
# ** DEPRECATED **
#
{{ end -}}
# To use this policy with the ec command line:
#   ec validate image \
#     --image $IMAGE \
#     --public-key key.pub \
#     --policy github.com/enterprise-contract/config//{{ .name }}
#
# To use with an RHTAP Enterprise Contract Integration Test CR:
#   ...
#   spec:
#     params:
#     - name: POLICY_CONFIGURATION
#       value: github.com/enterprise-contract/config//{{ .name }}
#     ...
#
description: >-
  {{ .description }}

publicKey: "k8s://openshift-pipelines/public-key"

sources:
  - name: Default
    policy:
      - github.com/enterprise-contract/ec-policies//policy/lib
      - github.com/enterprise-contract/ec-policies//policy/release
    data:
      - github.com/enterprise-contract/ec-policies//data

configuration:
  include:
    {{ .include | toYAML | strings.Indent 4 | strings.TrimSpace }}

  exclude:
    # Exclude step_image_registries for now since it can cause false
    # positives due to https://issues.redhat.com/browse/OCPBUGS-8428
    {{ .exclude | coll.Append "step_image_registries" | toYAML | strings.Indent 4 | strings.TrimSpace }}

{{- end -}}{{- end }}