PolicyRefs include an identity to verify the source:
|
message PolicyRef { |
|
string id = 1; |
|
int64 version = 2; |
|
Identity identity = 3; |
|
in_toto_attestation.v1.ResourceDescriptor location = 4; |
|
} |
Right now, the compiler does not take them into account, this is blocked atm as we are not checking identities at all but once we implement it, references should be checked when the compiler assembles sets and policies.
PolicyRefs include an identity to verify the source:
policy/proto/carabiner/policy/v1/policy.proto
Lines 55 to 60 in d7fc6b0
Right now, the compiler does not take them into account, this is blocked atm as we are not checking identities at all but once we implement it, references should be checked when the compiler assembles sets and policies.