Add sample rego policies
Open
@fournet is already working on this.
Since Sep 15, 2025.
Stage-0
- Dominant language
- C++
- Stars
- 16
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
I adapted the sample policies from our design notes, now in tests/rego ; see e4122d9.
I still need to adjust their invocation for CCFDNS, after cryptographic validation of two kinds of credentials:
- COSE_Sign1 statements (and in particular transparent statements once integrated with CTS)
- SEV-SNP attestations
and adapt the storage of policies in tables; we should probably keep a pair of the policy itself (for evaluation) and its COSE_Sign1 envelope with hashed payload (for updates).
- Amaury: cbor payloads to Rego input mapping (#46)
- Cedric: complete registration policies and platform/service policy
- Max: Save policies in the ledger
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.