Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update the artifact_signature description properties #84

Merged
merged 2 commits into from
Apr 11, 2024
Merged

Update the artifact_signature description properties #84

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2411bfb
Update artifact_signature.yaml
rdimitrov Apr 11, 2024
a18fbdb
Update artifact_signature.yaml
rdimitrov Apr 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions rule-types/github/artifact_signature.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ def:
properties:
name:
type: string
description: "The name of the artifact to check."
description: "The name of the artifact to check. Leave blank to match all names."
tags:
"type": array
"items": {
Expand All @@ -54,10 +54,10 @@ def:
properties:
is_signed:
type: boolean
description: "Set to true to enforce artifact being signed."
description: "Set to true to enforce artifact being signed. This checks only if there's a signature for this image, but it doesn't verify it."
is_verified:
type: boolean
description: "Set to true to enforce artifact signature being verified."
description: "Set to true to enforce artifact signature being verified. This checks that the signature is verified against the configured Sigstore instance."
repository:
type: string
description: "Set the repository that is expected to produce the artifact, i.e. https://github.com/stacklok/minder"
Expand All @@ -72,7 +72,7 @@ def:
description: "Set the runner environment that is expected to produce the artifact, i.e. github-hosted"
allowed_workflow:
type: boolean
description: "Set to true to enforce checking if the workflow that build this artifact is part of the allowed workflows"
description: "Set to true to enforce checking if the workflow that build this artifact is part of the allowed workflows. Note: Not implemented yet."
cert_issuer:
type: string
description: "Set the certificate issuer that is expected to produce the artifact provenance, i.e. https://token.actions.githubusercontent.com"
Expand Down Expand Up @@ -104,4 +104,4 @@ def:
# Defines the configuration for alerting on the rule
alert:
type: security_advisory
security_advisory: {}
security_advisory: {}
Loading