Add Policy DSL Validator, Schema Exporter, and Simulation Smoke tools
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Implemented PolicyDslValidator with command-line options for strict mode and JSON output. - Created PolicySchemaExporter to generate JSON schemas for policy-related models. - Developed PolicySimulationSmoke tool to validate policy simulations against expected outcomes. - Added project files and necessary dependencies for each tool. - Ensured proper error handling and usage instructions across tools.
This commit is contained in:
23
samples/policy/simulations/serverless/diff.json
Normal file
23
samples/policy/simulations/serverless/diff.json
Normal file
@@ -0,0 +1,23 @@
|
||||
{
|
||||
"summary": {
|
||||
"policy": "serverless",
|
||||
"policyDigest": "sha256:simulation-serverless",
|
||||
"changed": 2
|
||||
},
|
||||
"diffs": [
|
||||
{
|
||||
"findingId": "library:pkg/aws-lambda@1.0.0",
|
||||
"baselineStatus": "Pass",
|
||||
"projectedStatus": "Blocked",
|
||||
"rule": "block_any_high",
|
||||
"notes": "Serverless workloads block High+ severities."
|
||||
},
|
||||
{
|
||||
"findingId": "image:sha256:untrusted-base",
|
||||
"baselineStatus": "Pass",
|
||||
"projectedStatus": "Blocked",
|
||||
"rule": "forbid_unpinned_base",
|
||||
"notes": "Base image must be pinned (no :latest)."
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user