Skip to content

Commit

Permalink
format
Browse files Browse the repository at this point in the history
  • Loading branch information
itaysk committed Jan 23, 2025
1 parent aef6b0a commit 1dbefe1
Show file tree
Hide file tree
Showing 2 changed files with 20 additions and 23 deletions.
41 changes: 20 additions & 21 deletions checks/kubernetes/gatekeeper/repo_ambiguous_prefix.rego
Original file line number Diff line number Diff line change
Expand Up @@ -8,34 +8,33 @@
# avdid: AVD-KSV-0124
# severity: HIGH
package builtin.kubernetes.KSV0124

import rego.v1

relevan_resource if {
input.apiVersion == "constraints.gatekeeper.sh/v1beta1"
input.kind == "K8sAllowedRepos"
input.apiVersion == "constraints.gatekeeper.sh/v1beta1"
input.kind == "K8sAllowedRepos"
}

deny contains res if {
relevan_resource
some repo in input.spec.parameters.repos
not contains(repo,"/")
not contains(repo,":")
res := result.new(
"open-ended repository reference in prefix match",
repo
)
relevan_resource
some repo in input.spec.parameters.repos
not contains(repo, "/")
not contains(repo, ":")
res := result.new(
"open-ended repository reference in prefix match",
repo,
)
}

deny contains res if {
relevan_resource
some repo in input.spec.parameters.repos
parts:=split(repo,"/")
parts[0] == "docker.io"
count(parts) <= 2
res := result.new(
"open-ended repository reference in prefix match",
repo
)
relevan_resource
some repo in input.spec.parameters.repos
parts := split(repo, "/")
parts[0] == "docker.io"
count(parts) <= 2
res := result.new(
"open-ended repository reference in prefix match",
repo,
)
}


2 changes: 0 additions & 2 deletions checks/kubernetes/gatekeeper/repo_ambiguous_prefix_test.rego
Original file line number Diff line number Diff line change
Expand Up @@ -66,5 +66,3 @@ test_good_repos if {
count(r) == 0
}
}


0 comments on commit 1dbefe1

Please sign in to comment.