Skip to content

Commit

Permalink
Merge pull request #10 from phylum-dev/brad/updates
Browse files Browse the repository at this point in the history
Add All Crit and Sus IP regos
  • Loading branch information
furi0us333 authored Jul 17, 2024
2 parents 7cdce5e + 146a82a commit 6d8db56
Show file tree
Hide file tree
Showing 3 changed files with 45 additions and 0 deletions.
17 changes: 17 additions & 0 deletions all_crit_no_vuln.rego
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
# METADATA
# title: All Critical (except Software Vulnerability)
# description: |
# Blocks Critical issues (except software vulnerabilities)
package policy.v1

import data.phylum.domain
import data.phylum.level
import rego.v1

# METADATA
# title: Critical issue
deny contains issue if {
some issue in data.issues
issue.domain != domain.VULNERABILITY
issue.severity == level.CRITICAL
}
14 changes: 14 additions & 0 deletions copyleft_license.rego
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# METADATA
# title: Copyleft license
# description: |
# Block packages that have a copyleft license
package policy.v1

import rego.v1

# METADATA
# title: Copyleft license
deny contains issue if {
some issue in data.issues
issue.tag == "IL0050"
}
14 changes: 14 additions & 0 deletions suspicious_ip.rego
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# METADATA
# title: Suspicious IP References
# description: |
# Block packages containing suspicious IP addresses
package policy.v1

import rego.v1

# METADATA
# title: Suspicious IP reference
deny contains issue if {
some issue in data.issues
issue.tag == "CM0001"
}

0 comments on commit 6d8db56

Please sign in to comment.