-
Notifications
You must be signed in to change notification settings - Fork 1
/
layout.yaml
78 lines (74 loc) · 1.99 KB
/
layout.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
expires: "2024-06-11T12:59:59Z"
functionaries:
alice:
keyPath: credentials/alice.pub.pem
keyType: rsa
scheme: rsa
steps:
- name: untar
expectedProducts:
- "CREATE main.c"
- "CREATE external.c"
- "CREATE external.h"
- "CREATE Makefile"
- "CREATE it.Makefile"
- "DISALLOW *"
expectedPredicates:
- predicateType: https://in-toto.io/attestation/link/v0.3
expectedAttributes:
- rule: "predicate.command == ['tar', 'xvf', 'project.tar.gz']"
allowIfNoClaim: true
warn: true
functionaries:
- alice
- name: build_external
expectedMaterials:
- "MATCH external.c WITH products FROM untar"
- "MATCH external.h WITH products FROM untar"
- "ALLOW Makefile"
- "DISALLOW *"
expectedProducts:
- "CREATE external.o"
- "DISALLOW *"
expectedPredicates:
- predicateType: https://in-toto.io/attestation/link/v0.3
expectedAttributes:
- rule: "predicate.command == ['cc', '-c', '-o', 'external.o', 'external.c']"
allowIfNoClaim: true
warn: true
functionaries:
- alice
- name: build_main
expectedMaterials:
- "MATCH main.c WITH products FROM untar"
- "MATCH external.h WITH products FROM untar"
- "ALLOW Makefile"
- "DISALLOW *"
expectedProducts:
- "CREATE main.o"
- "DISALLOW *"
expectedPredicates:
- predicateType: https://in-toto.io/attestation/link/v0.3
expectedAttributes:
- rule: "predicate.command == ['cc', '-c', '-o', 'main.o', 'main.c']"
allowIfNoClaim: true
warn: true
functionaries:
- alice
- name: build_testy
expectedMaterials:
- "MATCH main.o WITH products FROM build_main"
- "MATCH external.o WITH products FROM build_external"
- "ALLOW Makefile"
- "DISALLOW *"
expectedProducts:
- "CREATE testy"
- "DISALLOW *"
expectedPredicates:
- predicateType: https://in-toto.io/attestation/link/v0.3
expectedAttributes:
- rule: "predicate.command == ['cc', '-o', 'testy', 'main.o', 'external.o']"
allowIfNoClaim: true
warn: true
functionaries:
- alice