Code

v2#80

Code

Draft

cppvik wants to merge 51 commits intodevscribe-public/sample-policies:devfrom v2scribe-public/sample-policies:v2Copy head branch name to clipboard

+15,449-17

Commits

Commits on Sep 26, 2024

• ssdf rules & initiative

  cppvik

  committed
  b1a345f

  Copy full SHA for b1a345f

• ssdf@v2 fixes

  cppvik

  committed
  03dbea1

  Copy full SHA for 03dbea1

• added bp1 initiative yaml

  cppvik

  committed
  726f8ad

  Copy full SHA for 726f8ad

• name fix

  cppvik

  committed
  9bc26d4

  Copy full SHA for 9bc26d4

Commits on Sep 29, 2024

• fixed banned_licenses rule rego

  cppvik

  committed
  fd10b83

  Copy full SHA for fd10b83

• explicitly set filter-by to [target,product] for sbom rules

  cppvik

  committed
  60db346

  Copy full SHA for 60db346

Commits on Sep 30, 2024

• use sbomversion field if and only if it's present

  cppvik

  committed
  d8cdff8

  Copy full SHA for d8cdff8

• updated cve api rule to require a target

  cppvik

  committed
  78c2dff

  Copy full SHA for 78c2dff

• added api-cve-product rule

  cppvik

  committed
  e890b7a

  Copy full SHA for e890b7a

Commits on Oct 1, 2024

• added ssdf-product initiative

  cppvik

  committed
  ad55e77

  Copy full SHA for ad55e77

• scoped SSDF.PS.2 to image sboms only

  cppvik

  committed
  a4f372c

  Copy full SHA for a4f372c

Commits on Oct 2, 2024

• added bp1-product initiative

  cppvik

  committed
  afc0d6e

  Copy full SHA for afc0d6e

Commits on Oct 6, 2024

• added BP1 descriptions

  cppvik

  committed
  3c5919b

  Copy full SHA for 3c5919b

Commits on Oct 7, 2024

• removed BP1 rule descriptions as they match rule names anyway

  cppvik

  committed
  ba374be

  Copy full SHA for ba374be

Commits on Oct 8, 2024

• Merge branch 'dev' into v2

  cppvik

  committed
  3b307b3

  Copy full SHA for 3b307b3

Commits on Oct 9, 2024

• added platform=gitlab label requirement for the gitlab rules

  cppvik

  committed
  e1523b2

  Copy full SHA for e1523b2

Commits on Oct 10, 2024

• added platform tags to github rules + updated ssdf to use github rules

  cppvik

  committed
  bf46fc9

  Copy full SHA for bf46fc9

• updated initiatives to use 'asset_on_target' functions

  cppvik

  committed
  9e105a1

  Copy full SHA for 9e105a1

Commits on Oct 13, 2024

• format-type => content_body_type

  cppvik

  committed
  68c8387

  Copy full SHA for 68c8387

• Revert "format-type => content_body_type"

  Show description for 61d1317
  cppvik

  committed
  61d1317

  Copy full SHA for 61d1317

Commits on Dec 1, 2024

• asset info for some rules

  cppvik

  committed
  85c2812

  Copy full SHA for 85c2812

• update asset info generation

  cppvik

  committed
  4afa370

  Copy full SHA for 4afa370

• moved v2 changes to v2/rules

  cppvik

  committed
  26669e9

  Copy full SHA for 26669e9

• moved v2/gitlab to v2/rules/gitlab

  cppvik

  committed
  8b7198e

  Copy full SHA for 8b7198e

• added missing rules

  cppvik

  committed
  2372e64

  Copy full SHA for 2372e64

• updated initiatives to use v2 rules

  cppvik

  committed
  0d01e9a

  Copy full SHA for 0d01e9a

Commits on Dec 2, 2024

• format-type -> content_body_type

  cppvik

  committed
  5846895

  Copy full SHA for 5846895

• format-type -> content_body_type

  cppvik

  committed
  ab708c9

  Copy full SHA for ab708c9

Commits on Dec 5, 2024

• added config types to v2

  cppvik

  committed
  3a3b9eb

  Copy full SHA for 3a3b9eb

• fail evidence-exists rule on no evidence

  cppvik

  committed
  9a7948d

  Copy full SHA for 9a7948d

• added generic/artifact-signed v2 rule

  cppvik

  committed
  d178216

  Copy full SHA for d178216

Commits on Dec 11, 2024

• updated existing v2 rules

  cppvik

  committed
  4d59333

  Copy full SHA for 4d59333

• more v2-compatible rules

  cppvik

  committed
  b1f21c1

  Copy full SHA for b1f21c1

• migration to v2

  cppvik

  committed
  1fdee2d

  Copy full SHA for 1fdee2d

Commits on Dec 12, 2024

• fixed rego scripts

  cppvik

  committed
  1e5dde5

  Copy full SHA for 1e5dde5

• using experimental secret scanning

  cppvik

  committed
  ef4d08b

  Copy full SHA for ef4d08b

Commits on Dec 15, 2024

• using experimental upload_evidence secret scanning input

  cppvik

  committed
  46738b5

  Copy full SHA for 46738b5

• disabled uploading evidence

  cppvik

  committed
  a2b2a8e

  Copy full SHA for a2b2a8e

• enabled uploading evidence

  cppvik

  committed
  e5c629c

  Copy full SHA for e5c629c

• disabled uploading evidence

  cppvik

  committed
  a85a642

  Copy full SHA for a85a642

Commits on Dec 16, 2024

• updated asset template functions

  cppvik

  committed
  3109c7b

  Copy full SHA for 3109c7b

Commits on Dec 17, 2024

• Merge remote-tracking branch 'origin/dev' into v2

  cppvik

  committed
  ebda973

  Copy full SHA for ebda973

• added missing v2 rules

  cppvik

  committed
  c72fc86

  Copy full SHA for c72fc86

Commits on Jan 9, 2025

• added config-type to the demodata rule

  cppvik

  committed
  97901bc

  Copy full SHA for 97901bc

• newlines

  cppvik

  committed
  ef43b57

  Copy full SHA for ef43b57

• adjust initiatives for the new separators & assets taken from the context

  cppvik

  committed
  c4d8fa6

  Copy full SHA for c4d8fa6

Commits on Jan 13, 2025

• Update policy bundle to v1.5.15 (#101)

  Show description for 1ed249d
  

  houdini91

  and

  scribe-public

  authored
  1ed249d

  Copy full SHA for 1ed249d

• updated v2 rule names & descriptions

  

  code-luac

  authored and

  cppvik

  committed
  304e66f

  Copy full SHA for 304e66f

• Merge remote-tracking branch 'origin/main' into v2

  cppvik

  committed
  332cb83

  Copy full SHA for 332cb83

• experimental: derive asset_name/type from the context instead of rule args

  cppvik

  committed
  52fba9e

  Copy full SHA for 52fba9e

• don't require evidence for gitlab/github api rules

  cppvik

  committed
  f749d59

  Copy full SHA for f749d59