main

文件	最后提交记录	最后更新时间
api	Let policy condition expressions return a violation message (#7641) * Let policy condition expressions return a violation message Implements ADR 043. A condition expression may return a string instead of a boolean. A non-blank string records a violation with that string as message, a blank string records none. The message is stored on the violation and included in POLICY_VIOLATION and NEW_POLICY_VIOLATIONS_SUMMARY notifications. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Require vulnerability policy conditions to return bool A matching vulnerability policy usually applies a suppression. Treating any non-blank string as a match could suppress findings by accident, so only boolean results are accepted. This also removes the unchecked result type special case from the compiler. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Render policy violation message as plain text in Slack template Matches the other fields in the policy violation section. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Remove result type tests from CelPolicyCompilerTest The same cases are covered at the resource layer by PolicyConditionResourceTest and VulnPoliciesResourceTest. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Drop label from Slack policy violation message The review asked only for the text type to become plain_text. A bold label would render as literal asterisks in plain text, so it is removed. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> --------- Signed-off-by: Matt Finkel <finkel.matt@gmail.com>	2 天前
publishing	Let policy condition expressions return a violation message (#7641) * Let policy condition expressions return a violation message Implements ADR 043. A condition expression may return a string instead of a boolean. A non-blank string records a violation with that string as message, a blank string records none. The message is stored on the violation and included in POLICY_VIOLATION and NEW_POLICY_VIOLATIONS_SUMMARY notifications. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Require vulnerability policy conditions to return bool A matching vulnerability policy usually applies a suppression. Treating any non-blank string as a match could suppress findings by accident, so only boolean results are accepted. This also removes the unchecked result type special case from the compiler. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Render policy violation message as plain text in Slack template Matches the other fields in the policy violation section. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Remove result type tests from CelPolicyCompilerTest The same cases are covered at the resource layer by PolicyConditionResourceTest and VulnPoliciesResourceTest. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> * Drop label from Slack policy violation message The review asked only for the text type to become plain_text. A bold label would render as literal asterisks in plain text, so it is removed. Signed-off-by: Matt Finkel <finkel.matt@gmail.com> --------- Signed-off-by: Matt Finkel <finkel.matt@gmail.com>	2 天前
templating	[maven-release-plugin] prepare for next development iteration	5 天前
pom.xml	[maven-release-plugin] prepare for next development iteration	5 天前