policy

type BasePolicy struct {
	// contains filtered or unexported fields
}

type Builtins struct {
	// contains filtered or unexported fields
}

type EvalOptions struct {
	RegoState           *rego.State
	Input               *models.State
	RelationsCache      *RelationsCache
	ResourcesQueryCache *ResourcesQueryCache
	Logger              logging.Logger
	Timeout             time.Duration
}

type LegacyIaCPolicy struct {
	*BasePolicy
}

type Metadata struct {
	ID           string                         `json:"id"`
	Title        string                         `json:"title"`
	Description  string                         `json:"description"`
	Platform     []string                       `json:"platform"`
	Remediation  map[string]string              `json:"remediation"`
	References   map[string][]MetadataReference `json:"references"`
	Category     string                         `json:"category"`
	Labels       []string                       `json:"labels,omitempty"`
	ServiceGroup string                         `json:"service_group"`
	Controls     []string                       `json:"controls"`
	Severity     string                         `json:"severity"`
	Product      []string                       `json:"product"`
	Kind         string                         `json:"kind"`
}

type MetadataReference struct {
	URL   string `json:"url" rego:"url"`
	Title string `json:"title,omitempty" rego:"title"`
}

type ModuleSet struct {
	Path    ast.Ref
	Modules []*ast.Module
}

type MultiResourcePolicy struct {
	*BasePolicy
	// contains filtered or unexported fields
}

type MultiResourceProcessor interface {
	ProcessValue(ast.Value) error
	ProcessResource(ast.Value) error
	Results() []models.RuleResult
}

type Policy interface {
	Package() string
	Metadata(ctx context.Context, state *rego.State) (Metadata, error)
	ID(ctx context.Context, state *rego.State) (string, error)
	Eval(ctx context.Context, options EvalOptions) ([]models.RuleResults, error)
	InputType() string
	InputTypeMatches(inputType string) bool
}

type ProcessMultiResultSet func(
	metadata Metadata,
	defaultRemediation string,
	resources map[string]*ruleResultBuilder,
) ([]models.RuleResult, error)

type RelationsCache struct {
	Forward  ast.Value
	Backward ast.Value
}

type ResourceKey struct {
	Namespace string
	Type      string
	ID        string
}

type ResourcesQuery struct {
	ResourceType string            `json:"resource_type" rego:"resource_type"`
	Scope        map[string]string `json:"scope" rego:"scope"`
}

type ResourcesQueryCache struct {
	ResourcesResolver ResourcesResolver
	// contains filtered or unexported fields
}

type ResourcesResolver func(ctx context.Context, req ResourcesQuery) (ResourcesResult, error)

type ResourcesResult struct {
	ScopeFound bool
	Resources  []models.ResourceState
}

type SingleResourcePolicy struct {
	*BasePolicy
	Query string
	// contains filtered or unexported fields
}

type SingleResourceProcessor interface {
	Process(ast.Value) error
	Results() []models.RuleResult
}