policy

type AttestationPolicy struct {
	// PreventBinaryArtifacts : set to true to require that this project's SCM repo is
	// free of binary artifacts
	PreventBinaryArtifacts bool `yaml:"preventBinaryArtifacts"`

	// AllowedBinaryArtifacts : List of binary artifact paths to ignore
	// when checking for binary artifacts in a repo
	AllowedBinaryArtifacts []string `yaml:"allowedBinaryArtifacts"`

	// PreventKnownVulnerabilities : set to true to require that this project is free
	// of vulnerabilities, as discovered from the OSV service
	PreventKnownVulnerabilities bool `yaml:"preventKnownVulnerabilities"`

	// PreventUnpinnedDependencies : set to true to require that this project pin dependencies
	// by hash/commit SHA
	PreventUnpinnedDependencies bool `yaml:"preventUnpinnedDependencies"`

	// AllowedUnpinnedDependencies : set of dependencies to ignore when checking for
	// unpinned dependencies
	AllowedUnpinnedDependencies []Dependency `yaml:"allowedUnpinnedDependencies"`

	// EnsureCodeReviewed : set to true to require that the most recent commits in
	// this project have gone through a code review process
	EnsureCodeReviewed bool `yaml:"ensureCodeReviewed"`

	// CodeReviewRequirements : define specific code review requirements that the default
	// branch must have met, e.g. required approvers
	CodeReviewRequirements CodeReviewRequirements `yaml:"codeReviewRequirements"`
}

type CodeReviewRequirements struct {
	RequiredApprovers []string `yaml:"requiredApprovers"`
	MinReviewers      int      `yaml:"minReviewers"`
}

type Dependency struct {
	Filepath    string `yaml:"filepath"`
	PackageName string `yaml:"packagename"`
	Version     string `yaml:"version"`
}

type PolicyResult = bool