Struct Policy 

pub struct Policy {
    pub require_signature: bool,
    pub forbid_no_verify: bool,
    pub allow_source_builds: Option<bool>,
    pub min_slsa_level: Option<u8>,
    pub allow_tools: Vec<String>,
    pub deny_tools: Vec<String>,
    pub allow_licenses: Vec<String>,
}

Org policy governing what may be installed (docs/14-enterprise.md).

Fields

require_signature: bool

forbid_no_verify: bool

allow_source_builds: Option<bool>

min_slsa_level: Option<u8>

allow_tools: Vec<String>

Allowed tool name patterns (* suffix wildcard). Empty = allow all.

deny_tools: Vec<String>

allow_licenses: Vec<String>

Implementations

impl Policy

pub fn from_toml(src: &str) -> VtaResult<Policy>

pub fn allows_tool(&self, tool: &str) -> bool

Whether a tool name is permitted (deny wins; empty allow = allow all).

pub fn check(&self, tool: &str, license: Option<&str>) -> VtaResult<()>

Enforce the tool/license rules, returning a policy-denied error if violated.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Policy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Policy

where Policy: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Policy

fn eq(&self, other: &Policy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Policy