Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(WIP) Prototype resource descriptor resolution #22

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

marcelamelara
Copy link

@marcelamelara marcelamelara commented Dec 29, 2023

The new features in this PR begin to make it possible to write policy rules about resources referenced in a Resource Descriptor within an predicate. This functionality is needed for predicates such as SCAI, in which a verifier may want to check claimed attributed against referenced evidence. The way we implement this is by resolving the resource specified in a given resource descriptor.

This PR focuses on implementing this feature only for local files. Resolving URI-based/remote resources will be part of a future PR.

Tasks:

  • Resolver for in-toto attestations
  • Resolver for non-attestations:
    • arbitrary JSON
    • plaintext files
  • Support for rules that filter fields within an attestation/JSON struct
  • Support for rules that filter within plaintext files

@trishankatdatadog
Copy link
Member

Please let us know when it's ready for review. Thanks!

@marcelamelara
Copy link
Author

Thanks for the ping on this. I hope to have some time to work on this PR this week.

Signed-off-by: Marcela Melara <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants