Update maven-build.yml

saurav631 · Sep 2, 2024 · a360b88 · a360b88
1 parent 941158f
commit a360b88
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml
@@ -44,6 +44,22 @@ jobs:
           RESULT=$(date +"%d.%m.%Y").$BRANCH_NAME.$GITHUB_RUN_NUMBER
           echo $RESULT
           ./mvnw -B package > app.jar
+
+      - name: Rego Policy
+        run: |
+        echo "package signature
+
+              allow[msg] {
+              input.Data.author_name != "saurav631"
+              msg := sprintf("Invalid Git Author: %v", [input.Data])
+              }
+
+              allow[msg] {
+              input.Data.branch != "main"
+              msg := sprintf("Invalid branch name: %v", [input.Data])
+              }" > policy.rego
+
+        cat policy.rego
 
       # - uses: actions/checkout@v4
       #   with: