custom error

Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>

Author: jiparis

app/cli/cmd/attestation_push.go

@@ -130,7 +130,7 @@ func newAttestationPushCmd() *cobra.Command {
 							logger.Warn().Msg(exceptionBypassPolicyCheck)
 							continue
 						}
-						return fmt.Errorf("your contract requires the policy %q to pass before continuing", eval.Name)
+						return NewGateError(eval.Name)
 					}
 				}
 			}
@@ -170,3 +170,15 @@ var (
 	ErrBlockedByPolicyViolation = fmt.Errorf("the operator requires all policies to pass before continuing, please fix them and try again or temporarily bypass the policy check using --%s", exceptionFlagName)
 	exceptionBypassPolicyCheck  = fmt.Sprintf("Attention: You have opted to bypass the policy enforcement check and an operator has been notified of this exception.\nPlease make sure you are back on track with the policy evaluations and remove the --%s as soon as possible.", exceptionFlagName)
 )
+
+type GateError struct {
+	PolicyName string
+}
+
+func NewGateError(policyName string) error {
+	return &GateError{PolicyName: policyName}
+}
+
+func (e *GateError) Error() string {
+	return fmt.Sprintf("the policy %q is configured as a gate and has violations", e.PolicyName)
+}

app/cli/main.go

@@ -78,6 +78,8 @@ func errorInfo(err error, logger zerolog.Logger) (string, int) {
 		}
 	}
 
+	var gateErr *cmd.GateError
+	
 	// Make overrides
 	switch {
 	case v1.IsCasBackendErrorReasonRequired(err):
@@ -101,6 +103,9 @@ func errorInfo(err error, logger zerolog.Logger) (string, int) {
 	case errors.Is(err, cmd.ErrBlockedByPolicyViolation):
 		// default exit code for policy violations
 		exitCode = 3
+	case errors.As(err, &gateErr):
+		// exit code for gate errors
+		exitCode = 4
 	}
 
 	return msg, exitCode

app/controlplane/api/gen/frontend/workflowcontract/v1/crafting_schema.ts

@@ -229,7 +229,7 @@ message PolicyAttachment {
     }
   }];
 
-  // If true, the policy will act as a gate, failing the attestation if the policy fails
+  // If true, the policy will act as a gate, returning an error code if the policy fails
   bool gate = 7;
 
   message MaterialSelector {