Merge remote-tracking branch 'origin/main' into matt/regal

phylum-dev · Apr 29, 2024 · 2fc1f34 · 2fc1f34
2 parents 98e2080 + f1b92a2
commit 2fc1f34
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/license_agpl.rego b/license_agpl.rego
@@ -0,0 +1,20 @@
+package policy
+
+import rego.v1
+
+is_agpl if {
+	regex.match(`(?i)\bAffero\b`, data.dependency.license)
+}
+
+is_agpl if {
+	regex.match(`(?i)\bAGPL\b`, data.dependency.license)
+}
+
+# Returns a violation if the package license metadata indicates "Affero" or "AGPL"
+# METADATA
+# scope: rule
+# schemas:
+#   - data.issue: schema.issue
+dependency contains "AGPL licensed software is not allowed" if {
+	is_agpl
+}