Create runs_remote_code.rego

phylum-dev · Jul 5, 2024 · ff3e8cb · ff3e8cb
1 parent 93e2c3a
commit ff3e8cb
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/runs_remote_code.rego b/runs_remote_code.rego
@@ -0,0 +1,14 @@
+# METADATA
+# title: Runs Remote Code
+# description: |
+#    Returns a violation if the package runs remote code
+
+package policy.v1
+
+import rego.v1
+
+# Runs remote code
+deny contains issue if {
+   some issue in data.issues
+   issue.tag in {"CM0024", "MM0024", "HM0032"}
+}