lcarva/ec-config

Preset policy configuration files for Enterprise Contract

Enterprise Contract Configuration Files

This repo contains a set of policy.yaml files which can be used with Enterprise Contract and the Red Hat Trusted Application Pipeline.

There is a predefined RHTAP Integration Test pipeline definition for each of these configs which can be used when creating an Integration Test in RHTAP as per the documentation here.

The policy configuration files are:

Default

Includes rules for levels 1, 2 & 3 of SLSA v0.1.

• URL for Enterprise Contract: github.com/enterprise-contract/config//default
• Source: default/policy.yaml
• RHTAP Integration Test pipeline definition:
  • Github URL: https://github.com/redhat-appstudio/build-definitions.git
  • Path in repository: pipelines/enterprise-contract.yaml

Minimal

Include a minimal set of basic checks.

• URL for Enterprise Contract: github.com/enterprise-contract/config//minimal
• Source: minimal/policy.yaml

SLSA1

The minimal rules plus the rules for level 1 of SLSA v0.1.

• URL for Enterprise Contract: github.com/enterprise-contract/config//slsa1
• Source: slsa1/policy.yaml
• RHTAP Integration Test pipeline definition:
  • Github URL: https://github.com/redhat-appstudio/build-definitions.git
  • Path in repository: pipelines/enterprise-contract-slsa1.yaml

SLSA2

The minimal rules plus the rules for levels 1 & 2 of SLSA v0.1.

• URL for Enterprise Contract: github.com/enterprise-contract/config//slsa2
• Source: slsa2/policy.yaml
• RHTAP Integration Test pipeline definition:
  • Github URL: https://github.com/redhat-appstudio/build-definitions.git
  • Path in repository: pipelines/enterprise-contract-slsa2.yaml

SLSA3

The minimal rules plus the rules for levels 1, 2 & 3 of SLSA v0.1.

• URL for Enterprise Contract: github.com/enterprise-contract/config//slsa3
• Source: slsa3/policy.yaml
• RHTAP Integration Test pipeline definition:
  • Github URL: https://github.com/redhat-appstudio/build-definitions.git
  • Path in repository: pipelines/enterprise-contract-slsa3.yaml

Everything

Include every rule in the default policy source.

• URL for Enterprise Contract: github.com/enterprise-contract/config//everything
• Source: everything/policy.yaml
• RHTAP Integration Test pipeline definition:
  • Github URL: https://github.com/redhat-appstudio/build-definitions.git
  • Path in repository: pipelines/enterprise-contract-everything.yaml

See also

• Policy Rule Documentation
• Getting Started with Enterprise Contract & Red Hat Trusted Application Pipeline