Struct PolicyTrigger 

pub struct PolicyTrigger {
    pub tool: Option<String>,
    pub host_glob: Option<String>,
    pub target_path_glob: Option<String>,
    pub command_glob: Option<String>,
}

Declarative action predicate stored on a local policy.

This is the persisted shape consumed by the pure policy matcher.

Unknown fields are rejected: every field is optional and an absent one is a wildcard, so a misspelled key would otherwise deserialize into an all-None trigger that matches every governed action.

Fields

tool: Option<String>

host_glob: Option<String>

target_path_glob: Option<String>

command_glob: Option<String>

Glob matched against the normalized command tokens joined by single spaces (action.argv, after wrapper stripping and sh -c unwrap). The only predicate that can gate a pathless verb (dd, terraform destroy, git reset --hard). Lexical and best-effort: quoting, variable expansion, and aliases bypass it, so a block on it is a tripwire, never a guarantee.

Trait Implementations

impl Clone for PolicyTrigger

fn clone(&self) -> PolicyTrigger

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyTrigger

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicyTrigger

fn default() -> PolicyTrigger

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PolicyTrigger

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PolicyTrigger

impl PartialEq for PolicyTrigger

fn eq(&self, other: &PolicyTrigger) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PolicyTrigger

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PolicyTrigger