Generic Artifact Signed
Type: Rule
ID: generic-artifact-signed
Source: v2/rules/generic/artifact-signed.yaml
Rego Source: artifact-signed.rego
Labels: 3rd-party
Verify required evidence is signed.
note
This rule requires Signed Generic Statement. See here for more details.
tip
Evidence IS required for this rule and will fail if missing.
tip
Signed Evidence for this rule IS required by default.
warning
Rule requires evaluation with a target. Without one, it will be disabled unless the --all-evidence
flag is provided.
Usage example
uses: generic/artifact-signed@v2
Evidence Requirements
Field | Value |
---|---|
signed | True |
content_body_type | generic |
target_type | data |
predicate_type | http://scribesecurity.com/evidence/generic/v0.1 |