intelops / genval

Simplifies configuration management for a wide range of tools, including Dockerfile, Kubernetes manifests, and other infrastructure files.
Apache License 2.0
6 stars 5 forks source link

Enhance the validation workflow for regoval and celval commands #88

Closed santoshkal closed 4 months ago

santoshkal commented 5 months ago

When validation IaC configs using regoval or celval commands a user needs to specify the policy to be used against the config.

Enhance this workflow by following updates:

If a user supplies only a target manifest file and does not provide any policy, Genval should pull the default policies from intelops security policy hub and apply them.

santoshkal commented 5 months ago

The PoC for validating Dockerfiles against a set of Rego policies stored in OCI registries is now available.

default1

Before integrating this functionality into other workflows, such as validating Kubernetes manifests, Terraform files, and CEL policies, the following considerations need to be noted:

cc/- @devopstoday11