Skip to content

Commit d0f0558

Browse files
committed
fix: copilot issues
Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
1 parent 516afcf commit d0f0558

6 files changed

Lines changed: 28 additions & 4 deletions

policies/gh_org_default_repo_permission.rego

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,10 +42,14 @@ risk_templates := [
4242
}
4343
]
4444

45-
_permissive_permissions := {"write", "admin"}
45+
_settings := object.get(input, "settings", {})
46+
47+
_default_repository_permission := object.get(_settings, "default_repository_permission", "")
48+
49+
_allowed_permissions := {"read", "none"}
4650

4751
violation[{"id": "default_permission_too_permissive"}] if {
48-
_permissive_permissions[input.settings.default_repository_permission]
52+
not _allowed_permissions[_default_repository_permission]
4953
}
5054

5155
title := "Default repository permission is set to 'read' or 'none'"

policies/gh_org_default_repo_permission_test.rego

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,3 +31,7 @@ test_default_permission_admin if {
3131
}
3232
}
3333
}
34+
35+
test_default_permission_missing if {
36+
count(violation) > 0 with input as {}
37+
}

policies/gh_org_members_can_create_repos.rego

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,12 @@ risk_templates := [
3636
}
3737
]
3838

39+
_settings := object.get(input, "settings", {})
40+
41+
_members_can_create_repositories := object.get(_settings, "members_can_create_repositories", true)
42+
3943
violation[{"id": "members_can_create_repos"}] if {
40-
input.settings.members_can_create_repositories == true
44+
_members_can_create_repositories
4145
}
4246

4347
title := "Organization members cannot create repositories"

policies/gh_org_members_can_create_repos_test.rego

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,3 +15,7 @@ test_members_can_create_repos if {
1515
}
1616
}
1717
}
18+
19+
test_members_create_repos_missing if {
20+
count(violation) > 0 with input as {}
21+
}

policies/gh_org_web_commit_signoff.rego

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,8 +35,12 @@ risk_templates := [
3535
}
3636
]
3737

38+
_settings := object.get(input, "settings", {})
39+
40+
_web_commit_signoff_required := object.get(_settings, "web_commit_signoff_required", false)
41+
3842
violation[{"id": "web_commit_signoff_not_required"}] if {
39-
input.settings.web_commit_signoff_required == false
43+
not _web_commit_signoff_required
4044
}
4145

4246
title := "Web commit sign-off is required for the organization"

policies/gh_org_web_commit_signoff_test.rego

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,3 +15,7 @@ test_web_commit_signoff_not_required if {
1515
}
1616
}
1717
}
18+
19+
test_web_commit_signoff_missing if {
20+
count(violation) > 0 with input as {}
21+
}

0 commit comments

Comments
 (0)