undo change

Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>

Author: jiparis

pkg/policies/testdata/container_policy.yaml

@@ -0,0 +1,20 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: Policy
+metadata:
+  name: container-policy
+  description: test policy
+  annotations:
+    category: containers
+spec:
+  policies:
+    - kind: CONTAINER_IMAGE
+      embedded: |
+        package main
+        
+        import rego.v1
+        
+        result := {
+          "violations": [],
+          "skipped": true,
+          "skip_reason": sprintf("the tag is '%s'", [input.chainloop_metadata.annotations["chainloop.material.image.tag"]])
+        }

pkg/policies/testdata/group_with_inputs.yaml

@@ -0,0 +1,23 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: PolicyGroup
+metadata:
+  name: group-with-inputs
+  description: test group
+  annotations:
+    category: test
+spec:
+  inputs:
+    - name: user_name
+      required: true
+    - name: domainName
+      required: false
+      default: "chainloop.dev"
+  policies:
+    materials:
+      - name: sbom
+        type: SBOM_CYCLONEDX_JSON
+        policies:
+          - ref: file://testdata/policy_with_inputs.yaml
+            with:
+              email: "{{inputs.user_name}}@{{inputs.domainName}}"
+

pkg/policies/testdata/group_with_interpolated_material.yaml

@@ -0,0 +1,25 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: PolicyGroup
+metadata:
+  name: group-with-inputs
+  description: test group
+  annotations:
+    category: test
+spec:
+  inputs:
+    - name: sbom_name
+      default: "sbom"
+    - name: user_name
+      required: true
+    - name: domainName
+      required: false
+      default: "chainloop.dev"
+  policies:
+    materials:
+      - name: "{{ inputs.sbom_name }}"
+        type: SBOM_CYCLONEDX_JSON
+        policies:
+          - ref: file://testdata/policy_with_inputs.yaml
+            with:
+              email: "{{inputs.user_name}}@{{inputs.domainName}}"
+

pkg/policies/testdata/materials.rego

@@ -0,0 +1,54 @@
+package main
+
+import rego.v1
+
+# Verifies there is a VEX material, even if not enforced by contract
+
+################################
+# Common section do NOT change #
+################################
+
+result := {
+    "skipped": skipped,
+    "violations": violations,
+    "skip_reason": skip_reason,
+}
+
+default skip_reason := ""
+
+skip_reason := m if {
+    not valid_input
+    m := "invalid input"
+}
+
+default skipped := true
+
+skipped := false if valid_input
+
+########################################
+# EO Common section, custom code below #
+########################################
+
+# Validates if the input is valid and can be understood by this policy
+valid_input := true
+
+# If the input is valid, check for any policy violation here
+violations contains msg if {
+    valid_input
+    not has_vex
+    msg := "missing VEX material"
+}
+
+# Collect all material types
+kinds contains kind if {
+    some material in input.predicate.materials
+    kind := material.annotations["chainloop.material.type"]
+}
+
+has_vex if {
+    "CSAF_VEX" in kinds
+}
+
+has_vex if {
+    "OPENVEX" in kinds
+}

pkg/policies/testdata/materials.yaml

@@ -0,0 +1,7 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: Policy
+metadata:
+  name: materials
+spec:
+  type: ATTESTATION
+  path: materials.rego

pkg/policies/testdata/missing_rego.yaml

@@ -0,0 +1,7 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: Policy
+metadata:
+  name: missing-rego
+spec:
+  type: ATTESTATION
+  path: this_is_a_missing.rego

pkg/policies/testdata/multi-kind.yaml

@@ -0,0 +1,13 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: Policy
+metadata:
+  name: multikind
+  description: multikind policy
+  annotations:
+    category: SBOM
+spec:
+  policies:
+    - kind: SBOM_SPDX_JSON
+      path: sbom_syft.rego
+    - kind: ATTESTATION
+      path: workflow.rego

pkg/policies/testdata/policy_group.yaml

@@ -0,0 +1,16 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: PolicyGroup
+metadata:
+  name: sbom-quality
+  description: This policy group applies a number of SBOM-related policies
+  annotations:
+    category: SBOM
+spec:
+  policies:
+    attestation:
+      - ref: file://testdata/with_arguments.yaml
+    materials:
+      - name: sbom
+        type: SBOM_SPDX_JSON
+        policies:
+          - ref: file://testdata/multi-kind.yaml

pkg/policies/testdata/policy_group_multikind.yaml

@@ -0,0 +1,16 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: PolicyGroup
+metadata:
+  name: sbom-quality
+  description: This policy group applies a number of SBOM-related policies
+  annotations:
+    category: SBOM
+spec:
+  policies:
+    materials:
+      - type: SBOM_CYCLONEDX_JSON
+        policies:
+          - ref: file://testdata/policy_with_ignore.yaml
+      - type: OPENVEX
+        policies:
+          - ref: file://testdata/policy_openvex_no_ignore.yaml

pkg/policies/testdata/policy_group_no_name.yaml

@@ -0,0 +1,15 @@
+apiVersion: workflowcontract.chainloop.dev/v1
+kind: PolicyGroup
+metadata:
+  name: sbom-quality
+  description: policy group with name-less material
+  annotations:
+    category: SBOM
+spec:
+  policies:
+    attestation:
+      - ref: file://testdata/with_arguments.yaml
+    materials:
+      - type: SBOM_SPDX_JSON
+        policies:
+          - ref: file://testdata/multi-kind.yaml