Skip to content

Commit

Permalink
test: add insecure wildcard signer identities for testing
Browse files Browse the repository at this point in the history
  • Loading branch information
alexashley committed Apr 3, 2024
1 parent eb8d8d8 commit ca6f0f9
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions policy/governance/identities.rego
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,10 @@ package governance
signer_identities := [
{
"issuer": "https://token.actions.githubusercontent.com",
"subjectRegExp": `^https://github\.com/liatrio/gh-trusted-builds-workflows/\.github/workflows/build-and-push\.yaml@refs/tags/v\d+\.\d+\.\d+$`,
"subjectRegExp": `^https://github\.com/liatrio/.*/\.github/workflows/build-and-push\.yaml@refs/tags/v\d+\.\d+\.\d+$`,
},
{
"issuer": "https://token.actions.githubusercontent.com",
"subjectRegExp": `^https://github\.com/liatrio/gh-trusted-builds-workflows/\.github/workflows/scan-image\.yaml@refs/tags/v\d+\.\d+\.\d+$`,
"subjectRegExp": `^https://github\.com/liatrio/.*/\.github/workflows/scan-image\.yaml@refs/tags/v\d+\.\d+\.\d+$`,
},
]

0 comments on commit ca6f0f9

Please sign in to comment.