Skip to content

(WIP) Prototype resource descriptor resolution#22

Draft
marcelamelara wants to merge 2 commits intoin-toto:mainfrom
marcelamelara:add-file-rd-resolver
Draft

(WIP) Prototype resource descriptor resolution#22
marcelamelara wants to merge 2 commits intoin-toto:mainfrom
marcelamelara:add-file-rd-resolver

Conversation

@marcelamelara
Copy link

@marcelamelara marcelamelara commented Dec 29, 2023

The new features in this PR begin to make it possible to write policy rules about resources referenced in a Resource Descriptor within an predicate. This functionality is needed for predicates such as SCAI, in which a verifier may want to check claimed attributed against referenced evidence. The way we implement this is by resolving the resource specified in a given resource descriptor.

This PR focuses on implementing this feature only for local files. Resolving URI-based/remote resources will be part of a future PR.

Tasks:

  • Resolver for in-toto attestations
  • Resolver for non-attestations:
    • arbitrary JSON
    • plaintext files
  • Support for rules that filter fields within an attestation/JSON struct
  • Support for rules that filter within plaintext files

Signed-off-by: Marcela Melara <marcela.melara@intel.com>
@trishankatdatadog
Copy link
Contributor

Please let us know when it's ready for review. Thanks!

@marcelamelara
Copy link
Author

Thanks for the ping on this. I hope to have some time to work on this PR this week.

Signed-off-by: Marcela Melara <marcela.melara@intel.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants