Skip to main content

Generic Artifact Signed

Type: Rule
ID: generic-artifact-signed
Source: v2/rules/generic/artifact-signed.yaml
Rego Source: artifact-signed.rego
Labels: 3rd-party

Verify required evidence is signed.

note

This rule requires Signed Generic Statement. See here for more details.

tip

Evidence IS required for this rule and will fail if missing.

tip

Signed Evidence for this rule IS required by default.

warning

Rule requires evaluation with a target. Without one, it will be disabled unless the --all-evidence flag is provided.

Usage example

uses: generic/artifact-signed@v2

Evidence Requirements

FieldValue
signedTrue
content_body_typegeneric
target_typedata
predicate_typehttp://scribesecurity.com/evidence/generic/v0.1