-
```
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
namespace: default
name: no-exec-role
rules:
- apiGroups: [""]
resources: ["pods/exec"]
verbs: []
apiVersion: rbac…
-
We're adding new the builtin functions in [internal/evaluator/rego.go](https://github.com/enterprise-contract/ec-cli/blob/fa60f09f02a1dbd6458b1efe72764bf1dd655320/internal/evaluator/rego.go). It would…
-
Keeping track of @jhkrug's docs work.
The goals?
- Docs as part of community building. How to progress?
- Rancher Prime integration. What's possible?
- Enterprise-ready lighthouse support goal. Wha…
-
The following Rego is valid now
```rego
package test
a["b"][{"c":"d"}] = 5
```
Earlier in my experiments this didn't seem to be valid and we have an explicit check against this. producing a "…
-
### Repro steps:
1. `mkdir case1 && cd case1`
2. `echo 'package main' >> rules.rego`
3. `echo 'test_1 {true}' >> rules.rego`
4. Open folder `case1` in vscode.
5. Open the command palette and run …
-
### Describe the bug
```latex
\begin{luacode}
local a=1
\end{luacode}
```
This code can’t be parsered as lua code.
The luacode env is matched as generic_environment so its context has been par…
-
Jethro system admins can configure the from-address for account rego emails. This can lead to issues if their domain doesn't have DKIM config to allow the Jethro sender to send from it.
To investi…
-
# 🐛 Summary #
According to the baseline for policy MS.SHAREPOINT.3.2v1, "This policy is only applicable if the external sharing slider on the admin center sharing page is set to **Anyone**."
So i…
-
### Proposed Change
Support the custom resources and deployment of this operator - https://github.com/DataDog/datadog-operator
---
### Contributor [Guides](https://docs.meshery.io/project/c…
-
# 💡 Summary #
Implement a new Rego policy check for MS.AAD.3.3v1 If Phishing-resistant MFA has not been enforced yet and Microsoft Authenticator is enabled, it SHALL be configured to show login con…