From be3520debd025535546058ad1a48be50bdaafa39 Mon Sep 17 00:00:00 2001
From: Dominic Ayre <domayre@outlook.com>
Date: Wed, 3 Dec 2025 15:48:55 +0000
Subject: [PATCH 1/7] Add fragment references from_image command

---
 src/confcom/azext_confcom/_params.py          | 21 ++++++
 .../command/fragment_references_from_image.py | 14 ++++
 src/confcom/azext_confcom/commands.py         |  3 +
 src/confcom/azext_confcom/custom.py           | 16 +++++
 src/confcom/azext_confcom/lib/cose.py         | 66 ++++++++++++++++++
 .../lib/fragment_references_from_image.py     | 41 +++++++++++
 src/confcom/azext_confcom/lib/fragments.py    | 22 ++++++
 src/confcom/azext_confcom/lib/images.py       | 69 +++++++++++++++++++
 src/confcom/azext_confcom/lib/oras.py         | 61 ++++++++++++++++
 9 files changed, 313 insertions(+)
 create mode 100644 src/confcom/azext_confcom/command/fragment_references_from_image.py
 create mode 100644 src/confcom/azext_confcom/lib/cose.py
 create mode 100644 src/confcom/azext_confcom/lib/fragment_references_from_image.py
 create mode 100644 src/confcom/azext_confcom/lib/fragments.py
 create mode 100644 src/confcom/azext_confcom/lib/images.py
 create mode 100644 src/confcom/azext_confcom/lib/oras.py

diff --git a/src/confcom/azext_confcom/_params.py b/src/confcom/azext_confcom/_params.py
index d75ce70abc1..3491ea4c974 100644
--- a/src/confcom/azext_confcom/_params.py
+++ b/src/confcom/azext_confcom/_params.py
@@ -235,6 +235,14 @@ def load_arguments(self, _):
             required=False,
             help='Container definitions to include in the policy'
         )
+        c.argument(
+            "fragment_definitions",
+            options_list=['--with-fragments'],
+            action='append',
+            type=json.loads,
+            required=False,
+            help='Fragment definitions to include in the policy'
+        )
 
     with self.argument_context("confcom acifragmentgen") as c:
         c.argument(
@@ -469,3 +477,16 @@ def load_arguments(self, _):
             help="Path to containerd socket if not using the default",
             validator=validate_katapolicygen_input,
         )
+
+    with self.argument_context("confcom fragment references from_image") as c:
+        c.positional(
+            "image",
+            type=str,
+            help="Image to create container definition from",
+        )
+        c.argument(
+            "minimum_svn",
+            required=False,
+            type=str,
+            help="Minimum Allowed Software Version Number for Fragment",
+        )
diff --git a/src/confcom/azext_confcom/command/fragment_references_from_image.py b/src/confcom/azext_confcom/command/fragment_references_from_image.py
new file mode 100644
index 00000000000..5805ea84ff3
--- /dev/null
+++ b/src/confcom/azext_confcom/command/fragment_references_from_image.py
@@ -0,0 +1,14 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import json
+
+from typing import Optional
+
+from azext_confcom.lib.fragment_references_from_image import fragment_references_from_image as lib_fragment_references_from_image
+
+
+def fragment_references_from_image(image: str, minimum_svn: Optional[str]) -> str:
+    return print(json.dumps(list(lib_fragment_references_from_image(image, minimum_svn))))
\ No newline at end of file
diff --git a/src/confcom/azext_confcom/commands.py b/src/confcom/azext_confcom/commands.py
index 7e1e93eabca..f9582ada29c 100644
--- a/src/confcom/azext_confcom/commands.py
+++ b/src/confcom/azext_confcom/commands.py
@@ -17,3 +17,6 @@ def load_command_table(self, _):
 
     with self.command_group("confcom"):
         pass
+
+    with self.command_group("confcom fragment references") as g:
+        g.custom_command("from_image", "fragment_references_from_image")
diff --git a/src/confcom/azext_confcom/custom.py b/src/confcom/azext_confcom/custom.py
index 1b243a31370..4c40e97225e 100644
--- a/src/confcom/azext_confcom/custom.py
+++ b/src/confcom/azext_confcom/custom.py
@@ -25,6 +25,7 @@
     print_existing_policy_from_yaml, print_func, str_to_sha256)
 from azext_confcom.command.fragment_attach import fragment_attach as _fragment_attach
 from azext_confcom.command.fragment_push import fragment_push as _fragment_push
+from azext_confcom.command.fragment_references_from_image import fragment_references_from_image as _fragment_references_from_image
 from knack.log import get_logger
 from pkg_resources import parse_version
 
@@ -57,6 +58,7 @@ def acipolicygen_confcom(
     include_fragments: bool = False,
     fragments_json: str = None,
     exclude_default_fragments: bool = False,
+    fragment_definitions: Optional[list] = None,
 ):
     if print_existing_policy or outraw or outraw_pretty_print:
         logger.warning(
@@ -165,6 +167,10 @@ def acipolicygen_confcom(
             container_definitions=container_definitions,
         )
 
+    if fragment_definitions:
+        for fragment_definition in fragment_definitions:
+            container_group_policies._fragments.extend(fragment_definition)  # pylint: disable=protected-access
+
     exit_code = 0
 
     # standardize the output so we're only operating on arrays
@@ -552,3 +558,13 @@ def fragment_push(
         signed_fragment=signed_fragment,
         manifest_tag=manifest_tag
     )
+
+
+def fragment_references_from_image(
+    image: str,
+    minimum_svn: Optional[str],
+) -> None:
+    _fragment_references_from_image(
+        image=image,
+        minimum_svn=minimum_svn,
+    )
diff --git a/src/confcom/azext_confcom/lib/cose.py b/src/confcom/azext_confcom/lib/cose.py
new file mode 100644
index 00000000000..d8c892c1c40
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/cose.py
@@ -0,0 +1,66 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import hashlib
+import platform
+import re
+import requests
+import subprocess
+
+from typing import Iterable
+from pathlib import Path
+
+from azext_confcom.lib.paths import get_binaries_dir
+
+
+_binaries_dir = get_binaries_dir()
+_cosesign1_binaries = {
+    "Linux": {
+        "path": _binaries_dir / "sign1util",
+        "url": "https://github.com/microsoft/cosesign1go/releases/download/v1.4.0/sign1util",
+        "sha256": "526b54aeb6293fc160e8fa1f81be6857300aba9641d45955f402f8b082a4d4a5",
+    },
+    "Windows": {
+        "path": _binaries_dir / "sign1util.exe",
+        "url": "https://github.com/microsoft/cosesign1go/releases/download/v1.4.0/sign1util.exe",
+        "sha256": "f33cccf2b1bb8c3a495c730984b47d0f0715678981dbfe712248a2452dd53303",
+    },
+}
+
+
+def cose_get():
+    for binary_info in _cosesign1_binaries.values():
+        cosesign1_fetch_resp = requests.get(binary_info["url"], verify=True)
+        cosesign1_fetch_resp.raise_for_status()
+
+        assert hashlib.sha256(cosesign1_fetch_resp.content).hexdigest() == binary_info["sha256"]
+
+        with open(binary_info["path"], "wb") as f:
+            f.write(cosesign1_fetch_resp.content)
+
+
+def cose_run(args: Iterable[str]) -> subprocess.CompletedProcess:
+    return subprocess.run(
+        [_cosesign1_binaries[platform.system()]["path"], *args],
+        check=True,
+        stdout=subprocess.PIPE,
+        text=True,
+    )
+
+
+def cose_print(file_path: Path):
+    return cose_run([
+        "print",
+        "--in", file_path.as_posix(),
+    ]).stdout.strip()
+
+
+def cose_get_properties(file_path: Path):
+    cose_print_output = cose_print(file_path)
+    return {
+        "iss": re.search(r"^iss:\s*(.*)$", cose_print_output, re.MULTILINE).group(1),
+        "feed": re.search(r"^feed:\s*(.*)$", cose_print_output, re.MULTILINE).group(1),
+        "payload": re.search(r"^payload:\s*(.*)", cose_print_output, re.MULTILINE | re.DOTALL).group(1),
+    }
\ No newline at end of file
diff --git a/src/confcom/azext_confcom/lib/fragment_references_from_image.py b/src/confcom/azext_confcom/lib/fragment_references_from_image.py
new file mode 100644
index 00000000000..cd9ebdaaeb7
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/fragment_references_from_image.py
@@ -0,0 +1,41 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import tempfile
+
+from pathlib import Path
+from typing import Optional
+
+from azext_confcom.lib.cose import cose_get_properties
+from azext_confcom.lib.fragments import get_fragments_from_image
+from azext_confcom.lib.opa import opa_eval
+
+
+def fragment_references_from_image(image: str, minimum_svn: Optional[str]):
+
+    for signed_fragment in get_fragments_from_image(image):
+
+        package_name = signed_fragment.name.split(".")[0]
+        cose_properties = cose_get_properties(signed_fragment)
+
+        with tempfile.NamedTemporaryFile("w+b") as payload:
+            payload.write(cose_properties["payload"].encode("utf-8"))
+            payload.flush()
+            fragment_properties = opa_eval(
+                Path(payload.name),
+                f"data.{package_name}",
+            )["result"][0]["expressions"][0]["value"]
+
+            yield {
+                "feed": cose_properties["feed"],
+                "includes": sorted(list(set(fragment_properties.keys()).intersection({
+                    "containers",
+                    "fragmnents",
+                    "namespace",
+                    "external_processes",
+                }))),
+                "issuer": cose_properties["iss"],
+                "minimum_svn": minimum_svn or fragment_properties["svn"],
+            }
diff --git a/src/confcom/azext_confcom/lib/fragments.py b/src/confcom/azext_confcom/lib/fragments.py
new file mode 100644
index 00000000000..aaf997b2e93
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/fragments.py
@@ -0,0 +1,22 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import tempfile
+
+from pathlib import Path
+
+from azext_confcom.lib.images import sanitize_image_reference
+from azext_confcom.lib.oras import get_artifact_references, pull
+
+
+def get_fragments_from_image(image_reference: str):
+
+    for reference in get_artifact_references(image_reference):
+
+        fragment_path = Path(tempfile.gettempdir()) / sanitize_image_reference(reference)
+        pull(reference, fragment_path)
+
+        for fragment_file in fragment_path.glob("*.rego.cose"):
+            yield fragment_file
diff --git a/src/confcom/azext_confcom/lib/images.py b/src/confcom/azext_confcom/lib/images.py
new file mode 100644
index 00000000000..4305903e47a
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/images.py
@@ -0,0 +1,69 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import functools
+import os
+import re
+import subprocess
+import docker
+
+
+@functools.lru_cache()
+def get_image(image_ref: str) -> docker.models.images.Image:
+
+    client = docker.from_env()
+
+    try:
+        image = client.images.get(image_ref)
+    except docker.errors.ImageNotFound:
+        client.images.pull(image_ref)
+
+    image = client.images.get(image_ref)
+    return image
+
+
+def get_image_layers(image: str) -> list[str]:
+
+    binary_path = os.path.join(os.path.dirname(os.path.realpath(__file__)), "..", "bin", "dmverity-vhd")
+
+    get_image(image)
+    result = subprocess.run(
+        [binary_path, "-d", "roothash", "-i", image],
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+        check=True,
+        text=True,
+    )
+
+    return [line.split("hash: ")[-1] for line in result.stdout.splitlines()]
+
+
+def get_image_config(image: str) -> dict:
+
+    image_config = get_image(image).attrs.get("Config")
+
+    config = {}
+
+    if image_config.get("Cmd") or image_config.get("Entrypoint"):
+        config["command"] = (
+            image_config.get("Entrypoint") or [] +
+            image_config.get("Cmd") or []
+        )
+
+    if image_config.get("Env"):
+        config["env_rules"] = [{
+            "pattern": p,
+            "strategy": "string",
+            "required": False,
+        } for p in image_config.get("Env")]
+
+    if image_config.get("WorkingDir"):
+        config["working_dir"] = image_config.get("WorkingDir")
+
+    return config
+
+
+def sanitize_image_reference(image_reference: str) -> str:
+    return re.sub(f"[{re.escape(r'<>:"/\\|?*@\0')}]", "-", image_reference)
diff --git a/src/confcom/azext_confcom/lib/oras.py b/src/confcom/azext_confcom/lib/oras.py
new file mode 100644
index 00000000000..c429f242d74
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/oras.py
@@ -0,0 +1,61 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import shutil
+import json
+import subprocess
+
+from pathlib import Path
+from typing import Iterable
+
+from azext_confcom.errors import eprint
+
+
+def oras_run(args: Iterable[str]) -> subprocess.CompletedProcess:
+
+    # Maintain existing behaviour of requiring the user to install ORAS themselves
+    if not shutil.which("oras"):
+        eprint("ORAS CLI not installed. Please install ORAS CLI: https://oras.land/docs/installation")
+
+    return subprocess.run(
+        ["oras", *args],
+        check=True,
+        stdout=subprocess.PIPE,
+        stderr=subprocess.DEVNULL,
+        text=True,
+    )
+
+
+def discover(reference: str):
+    return json.loads(oras_run([
+        "discover",
+        "--format",
+        "json",
+        reference,
+    ]).stdout.strip())
+
+
+def pull(reference: str, destination: Path):
+    return oras_run([
+        "pull",
+        "--output",
+        destination.as_posix(),
+        reference,
+    ])
+
+
+def get_artifact_references(reference: str):
+
+    def get_references(discover_result):
+        if "artifactType" in discover_result:
+            yield discover_result["reference"]
+        for field in discover_result.values():
+            if isinstance(field, list):
+                for item in field:
+                    yield from get_references(item)
+            if isinstance(field, dict):
+                yield from get_references(field)
+
+    return list(get_references(discover(reference)))

From f5544d4fc776995d3162c8ad097a27082ea3bad7 Mon Sep 17 00:00:00 2001
From: Dominic Ayre <domayre@outlook.com>
Date: Sun, 7 Dec 2025 18:42:17 +0000
Subject: [PATCH 2/7] Add tests

---
 src/confcom/azext_confcom/lib/cose.py         |  2 +-
 .../lib/fragment_references_from_image.py     |  4 +-
 src/confcom/azext_confcom/tests/conftest.py   | 59 ++++++++++++++++++-
 .../latest/test_confcom_acifragmentgen.py     | 57 ------------------
 ...t_confcom_fragment_reference_from_image.py | 58 ++++++++++++++++++
 5 files changed, 120 insertions(+), 60 deletions(-)
 create mode 100644 src/confcom/azext_confcom/tests/latest/test_confcom_fragment_reference_from_image.py

diff --git a/src/confcom/azext_confcom/lib/cose.py b/src/confcom/azext_confcom/lib/cose.py
index d8c892c1c40..180056b52ef 100644
--- a/src/confcom/azext_confcom/lib/cose.py
+++ b/src/confcom/azext_confcom/lib/cose.py
@@ -61,6 +61,6 @@ def cose_get_properties(file_path: Path):
     cose_print_output = cose_print(file_path)
     return {
         "iss": re.search(r"^iss:\s*(.*)$", cose_print_output, re.MULTILINE).group(1),
-        "feed": re.search(r"^feed:\s*(.*)$", cose_print_output, re.MULTILINE).group(1),
+        "feed": re.search(r"^feed:[ \t]*([^\r\n]*)", cose_print_output, re.MULTILINE).group(1),
         "payload": re.search(r"^payload:\s*(.*)", cose_print_output, re.MULTILINE | re.DOTALL).group(1),
     }
\ No newline at end of file
diff --git a/src/confcom/azext_confcom/lib/fragment_references_from_image.py b/src/confcom/azext_confcom/lib/fragment_references_from_image.py
index cd9ebdaaeb7..8bbafa990b2 100644
--- a/src/confcom/azext_confcom/lib/fragment_references_from_image.py
+++ b/src/confcom/azext_confcom/lib/fragment_references_from_image.py
@@ -3,6 +3,7 @@
 # Licensed under the MIT License. See License.txt in the project root for license information.
 # --------------------------------------------------------------------------------------------
 
+import re
 import tempfile
 
 from pathlib import Path
@@ -17,12 +18,13 @@ def fragment_references_from_image(image: str, minimum_svn: Optional[str]):
 
     for signed_fragment in get_fragments_from_image(image):
 
-        package_name = signed_fragment.name.split(".")[0]
         cose_properties = cose_get_properties(signed_fragment)
 
         with tempfile.NamedTemporaryFile("w+b") as payload:
             payload.write(cose_properties["payload"].encode("utf-8"))
             payload.flush()
+
+            package_name = re.search(r"^package\s*(.*)$", cose_properties["payload"], re.MULTILINE).group(1)
             fragment_properties = opa_eval(
                 Path(payload.name),
                 f"data.{package_name}",
diff --git a/src/confcom/azext_confcom/tests/conftest.py b/src/confcom/azext_confcom/tests/conftest.py
index abe3a1b6315..6874d3187a3 100644
--- a/src/confcom/azext_confcom/tests/conftest.py
+++ b/src/confcom/azext_confcom/tests/conftest.py
@@ -5,6 +5,7 @@
 
 import fcntl
 import importlib
+import json
 import os
 import subprocess
 import tempfile
@@ -12,9 +13,13 @@
 import pytest
 import sys
 import shutil
+import zipfile
 
 from pathlib import Path
-import zipfile
+
+
+CONFCOM_DIR = Path(__file__).parent.parent.parent
+SAMPLES_DIR = CONFCOM_DIR / "samples"
 
 
 # This fixture ensures tests are run against final built wheels of the extension
@@ -89,3 +94,55 @@ def run_on_wheel(request):
             importlib.import_module(module.__name__)
 
     yield
+
+
+@pytest.fixture()
+def docker_image():
+
+    registry_id = subprocess.run(
+        ["docker", "run", "-d", "-p", "0:5000", "registry:2"],
+        stdout=subprocess.PIPE,
+        text=True,
+    ).stdout
+
+    registry_port = subprocess.run(
+        ["docker", "port", registry_id],
+        stdout=subprocess.PIPE,
+        text=True,
+    ).stdout.split(":")[-1].strip()
+
+    test_container_ref = f"localhost:{registry_port}/hello-world:latest"
+    subprocess.run(["docker", "pull", "hello-world"])
+    subprocess.run(["docker", "tag", "hello-world", test_container_ref])
+    subprocess.run(["docker", "push", test_container_ref])
+
+    with tempfile.NamedTemporaryFile(mode="w+", encoding="utf-8", delete=True) as temp_file:
+        json.dump({
+            "version": "1.0.0",
+            "containers": [
+                {
+                    "name": "hello-world",
+                    "properties": {
+                        "image": test_container_ref,
+                    },
+                }
+            ]
+        }, temp_file)
+        temp_file.flush()
+
+        yield test_container_ref, temp_file.name
+
+    subprocess.run(["docker", "stop", registry_id])
+
+
+@pytest.fixture(scope="session")
+def cert_chain():
+    with tempfile.TemporaryDirectory() as temp_dir:
+        subprocess.run(
+            [
+                (SAMPLES_DIR / "certs" / "create_certchain.sh").as_posix(),
+                temp_dir
+            ],
+            check=True,
+        )
+        yield temp_dir
diff --git a/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py b/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py
index e46b8e6385a..cc1919d251c 100644
--- a/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py
+++ b/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py
@@ -3,71 +3,14 @@
 # Licensed under the MIT License. See License.txt in the project root for license information.
 # --------------------------------------------------------------------------------------------
 
-import contextlib
 import io
 import json
 import os
 import subprocess
 import tempfile
-import pytest
 
 from azext_confcom.custom import acifragmentgen_confcom, fragment_push, fragment_attach
 
-TEST_DIR = os.path.abspath(os.path.join(os.path.abspath(__file__), ".."))
-SAMPLES_DIR = os.path.abspath(os.path.join(TEST_DIR, "..", "..", "..", "samples"))
-
-
-@pytest.fixture()
-def docker_image():
-
-    registry_id = subprocess.run(
-        ["docker", "run", "-d", "-p", "0:5000", "registry:2"],
-        stdout=subprocess.PIPE,
-        text=True,
-    ).stdout
-
-    registry_port = subprocess.run(
-        ["docker", "port", registry_id],
-        stdout=subprocess.PIPE,
-        text=True,
-    ).stdout.split(":")[-1].strip()
-
-    test_container_ref = f"localhost:{registry_port}/hello-world:latest"
-    subprocess.run(["docker", "pull", "hello-world"])
-    subprocess.run(["docker", "tag", "hello-world", test_container_ref])
-    subprocess.run(["docker", "push", test_container_ref])
-
-    with tempfile.NamedTemporaryFile(mode="w+", encoding="utf-8", delete=True) as temp_file:
-        json.dump({
-            "version": "1.0.0",
-            "containers": [
-                {
-                    "name": "hello-world",
-                    "properties": {
-                        "image": test_container_ref,
-                    },
-                }
-            ]
-        }, temp_file)
-        temp_file.flush()
-
-        yield test_container_ref, temp_file.name
-
-    subprocess.run(["docker", "stop", registry_id])
-
-
-@pytest.fixture(scope="session")
-def cert_chain():
-    with tempfile.TemporaryDirectory() as temp_dir:
-        subprocess.run(
-            [
-                os.path.join(SAMPLES_DIR, "certs", "create_certchain.sh"),
-                temp_dir
-            ],
-            check=True,
-        )
-        yield temp_dir
-
 
 def test_acifragmentgen_fragment_gen(docker_image):
 
diff --git a/src/confcom/azext_confcom/tests/latest/test_confcom_fragment_reference_from_image.py b/src/confcom/azext_confcom/tests/latest/test_confcom_fragment_reference_from_image.py
new file mode 100644
index 00000000000..780b7457a7d
--- /dev/null
+++ b/src/confcom/azext_confcom/tests/latest/test_confcom_fragment_reference_from_image.py
@@ -0,0 +1,58 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import json
+import subprocess
+
+from contextlib import redirect_stdout
+from io import StringIO
+from pathlib import Path
+
+from azext_confcom.command.fragment_references_from_image import fragment_references_from_image
+
+
+CONFCOM_DIR = Path(__file__).parent.parent.parent.parent
+SAMPLES_DIR = CONFCOM_DIR / "samples"
+
+
+def test_fragment_reference_from_image(docker_image):
+
+    image_ref, spec_file_path = docker_image
+    signed_fragment_path = SAMPLES_DIR / "fragments" / "fragment.rego.cose"
+
+    # Attach a signed fragment to the image
+    subprocess.run(
+        [
+            "oras",
+            "attach",
+            "--artifact-type",
+            "application/x-ms-ccepolicy-frag",
+            image_ref,
+            signed_fragment_path.name,
+        ],
+        check=True,
+        timeout=120,
+        cwd=signed_fragment_path.parent.as_posix(),
+    )
+
+    # Generate the fragment reference
+    buffer = StringIO()
+    with redirect_stdout(buffer):
+        fragment_references_from_image(
+            image=image_ref,
+            minimum_svn=None,
+        )
+
+    fragment_references = json.loads(buffer.getvalue())
+
+    # Check the reference looks as expected
+    assert fragment_references == [
+        {
+            'feed': '',
+            'includes': ['containers'],
+            'issuer': 'did:x509:0:sha256:q2YUkwrO2Ufcq66-CXKS9CA-XZMqFMbFom99GjaR2eI::subject:CN:Contoso',
+            'minimum_svn': '1'
+        }
+    ]

From fd25c51ecba7e54431a709b8870fa1b3b8925e69 Mon Sep 17 00:00:00 2001
From: Dominic Ayre <domayre@outlook.com>
Date: Mon, 8 Dec 2025 09:13:29 +0000
Subject: [PATCH 3/7] Fix style failures

---
 .../azext_confcom/command/fragment_references_from_image.py   | 2 +-
 src/confcom/azext_confcom/custom.py                           | 4 +++-
 src/confcom/azext_confcom/lib/cose.py                         | 2 +-
 src/confcom/azext_confcom/lib/fragments.py                    | 3 +--
 4 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/src/confcom/azext_confcom/command/fragment_references_from_image.py b/src/confcom/azext_confcom/command/fragment_references_from_image.py
index 5805ea84ff3..313db95b8c6 100644
--- a/src/confcom/azext_confcom/command/fragment_references_from_image.py
+++ b/src/confcom/azext_confcom/command/fragment_references_from_image.py
@@ -11,4 +11,4 @@
 
 
 def fragment_references_from_image(image: str, minimum_svn: Optional[str]) -> str:
-    return print(json.dumps(list(lib_fragment_references_from_image(image, minimum_svn))))
\ No newline at end of file
+    return print(json.dumps(list(lib_fragment_references_from_image(image, minimum_svn))))
diff --git a/src/confcom/azext_confcom/custom.py b/src/confcom/azext_confcom/custom.py
index 4c40e97225e..7b4cba2320a 100644
--- a/src/confcom/azext_confcom/custom.py
+++ b/src/confcom/azext_confcom/custom.py
@@ -25,7 +25,9 @@
     print_existing_policy_from_yaml, print_func, str_to_sha256)
 from azext_confcom.command.fragment_attach import fragment_attach as _fragment_attach
 from azext_confcom.command.fragment_push import fragment_push as _fragment_push
-from azext_confcom.command.fragment_references_from_image import fragment_references_from_image as _fragment_references_from_image
+from azext_confcom.command.fragment_references_from_image import (
+    fragment_references_from_image as _fragment_references_from_image
+)
 from knack.log import get_logger
 from pkg_resources import parse_version
 
diff --git a/src/confcom/azext_confcom/lib/cose.py b/src/confcom/azext_confcom/lib/cose.py
index 180056b52ef..3cdcaf7cbd8 100644
--- a/src/confcom/azext_confcom/lib/cose.py
+++ b/src/confcom/azext_confcom/lib/cose.py
@@ -63,4 +63,4 @@ def cose_get_properties(file_path: Path):
         "iss": re.search(r"^iss:\s*(.*)$", cose_print_output, re.MULTILINE).group(1),
         "feed": re.search(r"^feed:[ \t]*([^\r\n]*)", cose_print_output, re.MULTILINE).group(1),
         "payload": re.search(r"^payload:\s*(.*)", cose_print_output, re.MULTILINE | re.DOTALL).group(1),
-    }
\ No newline at end of file
+    }
diff --git a/src/confcom/azext_confcom/lib/fragments.py b/src/confcom/azext_confcom/lib/fragments.py
index aaf997b2e93..e72ae1072e0 100644
--- a/src/confcom/azext_confcom/lib/fragments.py
+++ b/src/confcom/azext_confcom/lib/fragments.py
@@ -18,5 +18,4 @@ def get_fragments_from_image(image_reference: str):
         fragment_path = Path(tempfile.gettempdir()) / sanitize_image_reference(reference)
         pull(reference, fragment_path)
 
-        for fragment_file in fragment_path.glob("*.rego.cose"):
-            yield fragment_file
+        yield from fragment_path.glob("*.rego.cose")

From 22d788973d20d1b3b92ba6242cb85929f517797b Mon Sep 17 00:00:00 2001
From: Dominic Ayre <domayre@outlook.com>
Date: Mon, 8 Dec 2025 10:16:00 +0000
Subject: [PATCH 4/7] Rename fragment reference lib code file

---
 .../azext_confcom/command/fragment_references_from_image.py     | 2 +-
 ...fragment_references_from_image.py => fragment_references.py} | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
 rename src/confcom/azext_confcom/lib/{fragment_references_from_image.py => fragment_references.py} (95%)

diff --git a/src/confcom/azext_confcom/command/fragment_references_from_image.py b/src/confcom/azext_confcom/command/fragment_references_from_image.py
index 313db95b8c6..19b6ef4a13d 100644
--- a/src/confcom/azext_confcom/command/fragment_references_from_image.py
+++ b/src/confcom/azext_confcom/command/fragment_references_from_image.py
@@ -7,7 +7,7 @@
 
 from typing import Optional
 
-from azext_confcom.lib.fragment_references_from_image import fragment_references_from_image as lib_fragment_references_from_image
+from azext_confcom.lib.fragment_references import from_image as lib_fragment_references_from_image
 
 
 def fragment_references_from_image(image: str, minimum_svn: Optional[str]) -> str:
diff --git a/src/confcom/azext_confcom/lib/fragment_references_from_image.py b/src/confcom/azext_confcom/lib/fragment_references.py
similarity index 95%
rename from src/confcom/azext_confcom/lib/fragment_references_from_image.py
rename to src/confcom/azext_confcom/lib/fragment_references.py
index 8bbafa990b2..b8815e092f3 100644
--- a/src/confcom/azext_confcom/lib/fragment_references_from_image.py
+++ b/src/confcom/azext_confcom/lib/fragment_references.py
@@ -14,7 +14,7 @@
 from azext_confcom.lib.opa import opa_eval
 
 
-def fragment_references_from_image(image: str, minimum_svn: Optional[str]):
+def from_image(image: str, minimum_svn: Optional[str]):
 
     for signed_fragment in get_fragments_from_image(image):
 

From 9be0f114cc8cde99d2763c1295c1c44e78e5a43b Mon Sep 17 00:00:00 2001
From: Dominic Ayre <domayre@outlook.com>
Date: Mon, 8 Dec 2025 10:31:09 +0000
Subject: [PATCH 5/7] Fix style and linter issues

---
 linter_exclusions.yml                   |  6 ++++++
 src/confcom/azext_confcom/_help.py      | 25 +++++++++++++++++++++++++
 src/confcom/azext_confcom/lib/images.py |  3 ++-
 3 files changed, 33 insertions(+), 1 deletion(-)

diff --git a/linter_exclusions.yml b/linter_exclusions.yml
index 5105cb7f34b..39d7553115b 100644
--- a/linter_exclusions.yml
+++ b/linter_exclusions.yml
@@ -3516,3 +3516,9 @@ confcom fragment attach:
     signed_fragment:
       rule_exclusions:
         - no_positional_parameters
+
+confcom fragment references from_image:
+  parameters:
+    image:
+      rule_exclusions:
+        - no_positional_parameters
diff --git a/src/confcom/azext_confcom/_help.py b/src/confcom/azext_confcom/_help.py
index 9817bef723e..55781e5d13d 100644
--- a/src/confcom/azext_confcom/_help.py
+++ b/src/confcom/azext_confcom/_help.py
@@ -321,3 +321,28 @@
         - name: Attach the output of acifragmentgen to a registry
           text: az confcom acifragmentgen --chain my.cert.pem --key my_key.pem --svn "1" --namespace contoso --feed "test-feed" --input ./fragment_spec.json | az confcom fragment attach --manifest-tag myregistry.azurecr.io/image:latest
 """
+
+helps[
+    "confcom fragment references"
+] = """
+    type: group
+    short-summary: Commands which generate Security Policy Fragment References.
+"""
+
+
+helps[
+    "confcom fragment references from_image"
+] = """
+    type: command
+    short-summary: Create a Security Policy Fragment Reference based on an image reference.
+
+    parameters:
+        - name: --minimum-svn
+          type: str
+          short-summary: 'The value of the minimum SVN field in the generated fragment reference, defaults to current fragment reference'
+
+
+    examples:
+        - name: Input an image reference and generate fragment reference
+          text: az confcom fragment references from_image my.azurecr.io/myimage:tag
+"""
diff --git a/src/confcom/azext_confcom/lib/images.py b/src/confcom/azext_confcom/lib/images.py
index 4305903e47a..06f2f59bbc2 100644
--- a/src/confcom/azext_confcom/lib/images.py
+++ b/src/confcom/azext_confcom/lib/images.py
@@ -66,4 +66,5 @@ def get_image_config(image: str) -> dict:
 
 
 def sanitize_image_reference(image_reference: str) -> str:
-    return re.sub(f"[{re.escape(r'<>:"/\\|?*@\0')}]", "-", image_reference)
+    illegal = r'<>:"/\\|?*@\0'
+    return re.sub(f"[{re.escape(illegal)}]", "-", image_reference)

From 7115f86b746f374a48f722b03241cf8f7ade644d Mon Sep 17 00:00:00 2001
From: Dominic Ayre <domayre@outlook.com>
Date: Tue, 16 Dec 2025 16:07:36 +0000
Subject: [PATCH 6/7] Fix comamnd without opa

---
 src/confcom/azext_confcom/lib/fragment_references.py | 8 ++------
 src/confcom/azext_confcom/lib/serialization.py       | 9 ++++++++-
 2 files changed, 10 insertions(+), 7 deletions(-)

diff --git a/src/confcom/azext_confcom/lib/fragment_references.py b/src/confcom/azext_confcom/lib/fragment_references.py
index b8815e092f3..6f5d18dd4ce 100644
--- a/src/confcom/azext_confcom/lib/fragment_references.py
+++ b/src/confcom/azext_confcom/lib/fragment_references.py
@@ -11,7 +11,7 @@
 
 from azext_confcom.lib.cose import cose_get_properties
 from azext_confcom.lib.fragments import get_fragments_from_image
-from azext_confcom.lib.opa import opa_eval
+from azext_confcom.lib.serialization import rego_eval
 
 
 def from_image(image: str, minimum_svn: Optional[str]):
@@ -24,11 +24,7 @@ def from_image(image: str, minimum_svn: Optional[str]):
             payload.write(cose_properties["payload"].encode("utf-8"))
             payload.flush()
 
-            package_name = re.search(r"^package\s*(.*)$", cose_properties["payload"], re.MULTILINE).group(1)
-            fragment_properties = opa_eval(
-                Path(payload.name),
-                f"data.{package_name}",
-            )["result"][0]["expressions"][0]["value"]
+            fragment_properties = rego_eval(payload.name)
 
             yield {
                 "feed": cose_properties["feed"],
diff --git a/src/confcom/azext_confcom/lib/serialization.py b/src/confcom/azext_confcom/lib/serialization.py
index 7702bfef8ba..947c5863d60 100644
--- a/src/confcom/azext_confcom/lib/serialization.py
+++ b/src/confcom/azext_confcom/lib/serialization.py
@@ -76,7 +76,7 @@ def fragment_serialize(fragment: Fragment):
 """)
 
 
-def policy_deserialize(file_path: str):
+def rego_eval(file_path: str):
 
     with open(file_path, 'r') as f:
         content = f.readlines()
@@ -124,6 +124,13 @@ def _brace_delta(line: str) -> int:
 
         line_idx += 1
 
+    return policy_json
+
+
+def policy_deserialize(file_path: str):
+
+    policy_json = rego_eval(file_path)
+
     PolicyType = Policy if policy_json.get("package") == "policy" else Fragment
 
     raw_fragments = policy_json.pop("fragments", [])

From 7ba2266f7e1c3844d60e605d25fbe1240316f231 Mon Sep 17 00:00:00 2001
From: Dominic Ayre <domayre@outlook.com>
Date: Tue, 16 Dec 2025 16:12:36 +0000
Subject: [PATCH 7/7] Address azdev style

---
 src/confcom/azext_confcom/lib/fragment_references.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/confcom/azext_confcom/lib/fragment_references.py b/src/confcom/azext_confcom/lib/fragment_references.py
index 6f5d18dd4ce..e27f0c03d50 100644
--- a/src/confcom/azext_confcom/lib/fragment_references.py
+++ b/src/confcom/azext_confcom/lib/fragment_references.py
@@ -3,10 +3,8 @@
 # Licensed under the MIT License. See License.txt in the project root for license information.
 # --------------------------------------------------------------------------------------------
 
-import re
 import tempfile
 
-from pathlib import Path
 from typing import Optional
 
 from azext_confcom.lib.cose import cose_get_properties