Giters

sigstore / policy-controller

Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support Common Expression Language (CEL)

znewman01 opened this issue · comments

commented

Currently, policy-controller lets you inline Rego/CUE policies. The alpha Validating Admission Policies use CEL (which is really quite simple/fast) to validate resources.

Would it be worthwhile to add support for CEL here? It would be useful in combination with checks on attestations/signatures (which the upstream feature can't) .