Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
4024bc0
regopolicyinterpreter: Add Set metadata (in additional to string maps)
micromaomao Sep 17, 2025
0933292
framework.rego: Refactor policy_fragments to remove code duplication …
micromaomao Sep 19, 2025
8abbef7
rego: Support env rules with separate name and value patterns and mat…
micromaomao Oct 30, 2025
30a47d4
regopolicy_test: Add tests for name/value env rules
micromaomao Oct 29, 2025
29434ac
rego: Implement fragment parameters
micromaomao Sep 19, 2025
8f63316
rego: Fix missing error message when starting container with mismatch…
micromaomao Nov 4, 2025
6e9f9b4
regopolicy_test: Add tests for fragment parameters
micromaomao Nov 4, 2025
a5779fe
Rename the parameters metadata block to parameters_api
micromaomao Nov 26, 2025
e2d8425
rego: Support env rules with separate name and value patterns and mat…
micromaomao Oct 30, 2025
8ba30db
regopolicy_test: Add tests for name/value env rules
micromaomao Oct 29, 2025
e62ba3b
---------------------------------------------
micromaomao Mar 4, 2026
aec2d48
rego: Fix unable to start container with empty env list when non-requ…
micromaomao Nov 18, 2025
376dbf7
framework.rego: Refactor policy_containers to remove code duplication
micromaomao Nov 18, 2025
b2e3f2d
rego: Implement platform_rules support
micromaomao Nov 18, 2025
92025e2
rego: Fix create_container enforcement deny message missing input.rul…
micromaomao Nov 19, 2025
7fe78ad
regopolicy_linux_test: Test for platform_rules
micromaomao Nov 21, 2025
c953634
Merge branch 'fragment-specialization-mainrebase' into HEAD
micromaomao Jul 10, 2026
99194bd
Merge branch 'platform-rules-mainrebase' into HEAD
micromaomao Jul 10, 2026
7dc8f43
---------------------------------------------
micromaomao Jun 8, 2026
f15e679
regopolicyinterpreter: Actually use opa v1
micromaomao Dec 11, 2025
6050ce6
go get github.com/open-policy-agent/opa && go mod vendor
micromaomao Jun 8, 2026
283a35c
test/: go get github.com/open-policy-agent/opa
micromaomao Jun 8, 2026
bb2aa80
framework.rego: Fix v0->v1 rego syntax via Regex replace
micromaomao Dec 11, 2025
9d58ac7
Fix remaining missing if
micromaomao Dec 11, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
37 changes: 15 additions & 22 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ require (
github.com/linuxkit/virtsock v0.0.0-20241009230534-cb6a20cc0422
github.com/mattn/go-shellwords v1.0.13
github.com/moby/sys/user v0.4.0
github.com/open-policy-agent/opa v1.4.0
github.com/open-policy-agent/opa v1.18.2
github.com/opencontainers/cgroups v0.0.6
github.com/opencontainers/runc v1.4.3
github.com/opencontainers/runtime-spec v1.3.0
Expand All @@ -68,7 +68,6 @@ require (
require (
cyphar.com/go-pathrs v0.2.4 // indirect
github.com/agnivade/levenshtein v1.2.1 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/checkpoint-restore/go-criu/v7 v7.2.0 // indirect
github.com/cilium/ebpf v0.17.3 // indirect
Expand All @@ -78,65 +77,59 @@ require (
github.com/coreos/go-systemd/v22 v22.7.0 // indirect
github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
github.com/cyphar/filepath-securejoin v0.6.1 // indirect
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.1 // indirect
github.com/docker/cli v29.4.3+incompatible // indirect
github.com/docker/docker-credential-helpers v0.9.3 // indirect
github.com/docker/go-units v0.5.0 // indirect
github.com/fxamacker/cbor/v2 v2.9.0 // indirect
github.com/go-ini/ini v1.67.0 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/gobwas/glob v0.2.3 // indirect
github.com/goccy/go-json v0.10.3 // indirect
github.com/goccy/go-json v0.10.6 // indirect
github.com/godbus/dbus/v5 v5.1.0 // indirect
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
github.com/golang/protobuf v1.5.4 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/gorilla/mux v1.8.1 // indirect
github.com/klauspost/compress v1.18.6 // indirect
github.com/lestrrat-go/backoff/v2 v2.0.8 // indirect
github.com/lestrrat-go/blackmagic v1.0.2 // indirect
github.com/lestrrat-go/blackmagic v1.0.4 // indirect
github.com/lestrrat-go/dsig v1.2.1 // indirect
github.com/lestrrat-go/dsig-secp256k1 v1.0.0 // indirect
github.com/lestrrat-go/httpcc v1.0.1 // indirect
github.com/lestrrat-go/httprc/v3 v3.0.5 // indirect
github.com/lestrrat-go/iter v1.0.2 // indirect
github.com/lestrrat-go/jwx v1.2.31 // indirect
github.com/lestrrat-go/jwx/v3 v3.1.1 // indirect
github.com/lestrrat-go/option v1.0.1 // indirect
github.com/lestrrat-go/option/v2 v2.0.0 // indirect
github.com/mdlayher/socket v0.5.1 // indirect
github.com/mdlayher/vsock v1.2.1 // indirect
github.com/moby/sys/capability v0.4.0 // indirect
github.com/moby/sys/mountinfo v0.7.2 // indirect
github.com/moby/sys/userns v0.1.0 // indirect
github.com/mrunalp/fileutils v0.5.1 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.1 // indirect
github.com/opencontainers/selinux v1.13.1 // indirect
github.com/prometheus/client_golang v1.23.2 // indirect
github.com/prometheus/client_model v0.6.2 // indirect
github.com/prometheus/common v0.66.1 // indirect
github.com/prometheus/procfs v0.16.1 // indirect
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0 // indirect
github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9 // indirect
github.com/russross/blackfriday/v2 v2.1.0 // indirect
github.com/seccomp/libseccomp-golang v0.11.1 // indirect
github.com/segmentio/asm v1.2.1 // indirect
github.com/tchap/go-patricia/v2 v2.3.3 // indirect
github.com/valyala/fastjson v1.6.10 // indirect
github.com/vektah/gqlparser/v2 v2.5.34 // indirect
github.com/veraison/go-cose v1.3.0 // indirect
github.com/x448/float16 v0.8.4 // indirect
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect
github.com/yashtewari/glob-intersection v0.2.0 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/otel v1.43.0 // indirect
go.opentelemetry.io/otel/metric v1.43.0 // indirect
go.opentelemetry.io/otel/sdk v1.43.0 // indirect
go.opentelemetry.io/otel/trace v1.43.0 // indirect
go.yaml.in/yaml/v2 v2.4.4 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
golang.org/x/crypto v0.53.0 // indirect
golang.org/x/mod v0.37.0 // indirect
golang.org/x/text v0.38.0 // indirect
golang.org/x/tools v0.46.0 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa // indirect
google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.2 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
sigs.k8s.io/yaml v1.6.0 // indirect
)

Expand Down
Loading
Loading