diff --git a/docs/configuration/initiatives/rules/api/scribe-api-cve.md b/docs/configuration/initiatives/rules/api/scribe-api-cve.md index b5db80e7..1e18d802 100644 --- a/docs/configuration/initiatives/rules/api/scribe-api-cve.md +++ b/docs/configuration/initiatives/rules/api/scribe-api-cve.md @@ -18,7 +18,7 @@ Rule requires the Scribe API to be enabled. Ensure that you provide the Scribe T Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/api/scribe-api-published.md b/docs/configuration/initiatives/rules/api/scribe-api-published.md index 58091e9d..69166e00 100644 --- a/docs/configuration/initiatives/rules/api/scribe-api-published.md +++ b/docs/configuration/initiatives/rules/api/scribe-api-published.md @@ -18,7 +18,7 @@ Rule requires the Scribe API to be enabled. Ensure that you provide the Scribe T Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/api/scribe-api.md b/docs/configuration/initiatives/rules/api/scribe-api.md index fa486ba3..3e9a5e7e 100644 --- a/docs/configuration/initiatives/rules/api/scribe-api.md +++ b/docs/configuration/initiatives/rules/api/scribe-api.md @@ -18,7 +18,7 @@ Rule requires the Scribe API to be enabled. Ensure that you provide the Scribe T Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/bitbucket/project/allow-admins.md b/docs/configuration/initiatives/rules/bitbucket/project/allow-admins.md index a3ec6ff3..0849399d 100644 --- a/docs/configuration/initiatives/rules/bitbucket/project/allow-admins.md +++ b/docs/configuration/initiatives/rules/bitbucket/project/allow-admins.md @@ -17,8 +17,11 @@ This rule requires Bitbucket Project Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | project | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/bitbucket/project/allow-users.md b/docs/configuration/initiatives/rules/bitbucket/project/allow-users.md index 6901edee..fd225f4b 100644 --- a/docs/configuration/initiatives/rules/bitbucket/project/allow-users.md +++ b/docs/configuration/initiatives/rules/bitbucket/project/allow-users.md @@ -17,8 +17,11 @@ This rule requires Bitbucket Project Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | project | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/bitbucket/project/evidence-exists.md b/docs/configuration/initiatives/rules/bitbucket/project/evidence-exists.md index 6c9e275f..ecd79790 100644 --- a/docs/configuration/initiatives/rules/bitbucket/project/evidence-exists.md +++ b/docs/configuration/initiatives/rules/bitbucket/project/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Bitbucket Project Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: bitbucket/project/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | project | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/bitbucket/project/exposed-credentials.md b/docs/configuration/initiatives/rules/bitbucket/project/exposed-credentials.md index 4ff8b5b2..a5e63f49 100644 --- a/docs/configuration/initiatives/rules/bitbucket/project/exposed-credentials.md +++ b/docs/configuration/initiatives/rules/bitbucket/project/exposed-credentials.md @@ -18,8 +18,11 @@ This rule requires Bitbucket Project Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | project | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/bitbucket/project/long-live-tokens.md b/docs/configuration/initiatives/rules/bitbucket/project/long-live-tokens.md index 26b9909d..b01ceeb7 100644 --- a/docs/configuration/initiatives/rules/bitbucket/project/long-live-tokens.md +++ b/docs/configuration/initiatives/rules/bitbucket/project/long-live-tokens.md @@ -18,8 +18,11 @@ This rule requires Bitbucket Project Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,24 +49,14 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | project | -| asset_name | Template value (see below) | | labels | - platform_instance=bitbucket_dc | -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` - ## Input Definitions | Parameter | Type | Required | Description | Default | |-----------|------|----------|-------------| --------| diff --git a/docs/configuration/initiatives/rules/bitbucket/repository/allow-admins.md b/docs/configuration/initiatives/rules/bitbucket/repository/allow-admins.md index df915a94..666f93a3 100644 --- a/docs/configuration/initiatives/rules/bitbucket/repository/allow-admins.md +++ b/docs/configuration/initiatives/rules/bitbucket/repository/allow-admins.md @@ -18,8 +18,11 @@ This rule requires Bitbucket Repository Discovery Evidence. See [here](/docs/pla Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/bitbucket/repository/allow-users.md b/docs/configuration/initiatives/rules/bitbucket/repository/allow-users.md index 925ecf74..956aa87c 100644 --- a/docs/configuration/initiatives/rules/bitbucket/repository/allow-users.md +++ b/docs/configuration/initiatives/rules/bitbucket/repository/allow-users.md @@ -18,8 +18,11 @@ This rule requires Bitbucket Repository Discovery Evidence. See [here](/docs/pla Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/bitbucket/repository/branch-protection.md b/docs/configuration/initiatives/rules/bitbucket/repository/branch-protection.md index f16823e5..a95893ec 100644 --- a/docs/configuration/initiatives/rules/bitbucket/repository/branch-protection.md +++ b/docs/configuration/initiatives/rules/bitbucket/repository/branch-protection.md @@ -18,8 +18,11 @@ This rule requires Bitbucket Repository Discovery Evidence. See [here](/docs/pla Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/bitbucket/repository/evidence-exists.md b/docs/configuration/initiatives/rules/bitbucket/repository/evidence-exists.md index 43f7c224..55178ad4 100644 --- a/docs/configuration/initiatives/rules/bitbucket/repository/evidence-exists.md +++ b/docs/configuration/initiatives/rules/bitbucket/repository/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Bitbucket Repository Discovery Evidence. See [here](/docs/pla Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: bitbucket/repository/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/bitbucket/workspace/allow-admins.md b/docs/configuration/initiatives/rules/bitbucket/workspace/allow-admins.md index c27ed8b0..152a6a98 100644 --- a/docs/configuration/initiatives/rules/bitbucket/workspace/allow-admins.md +++ b/docs/configuration/initiatives/rules/bitbucket/workspace/allow-admins.md @@ -18,8 +18,11 @@ This rule requires Bitbucket Workspace Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | workspace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "workspace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/bitbucket/workspace/allow-users.md b/docs/configuration/initiatives/rules/bitbucket/workspace/allow-users.md index 1bb78370..c6e589aa 100644 --- a/docs/configuration/initiatives/rules/bitbucket/workspace/allow-users.md +++ b/docs/configuration/initiatives/rules/bitbucket/workspace/allow-users.md @@ -18,8 +18,11 @@ This rule requires Bitbucket Workspace Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | workspace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "workspace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/bitbucket/workspace/evidence-exists.md b/docs/configuration/initiatives/rules/bitbucket/workspace/evidence-exists.md index 45322ca7..20cba972 100644 --- a/docs/configuration/initiatives/rules/bitbucket/workspace/evidence-exists.md +++ b/docs/configuration/initiatives/rules/bitbucket/workspace/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Bitbucket Workspace Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: bitbucket/workspace/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | bitbucket | | asset_type | workspace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "workspace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/dockerhub/token-expiration.md b/docs/configuration/initiatives/rules/dockerhub/token-expiration.md index d0a7936a..8c7a4597 100644 --- a/docs/configuration/initiatives/rules/dockerhub/token-expiration.md +++ b/docs/configuration/initiatives/rules/dockerhub/token-expiration.md @@ -18,8 +18,11 @@ This rule requires Dockerhub Project Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -45,21 +48,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | dockerhub | | asset_type | oci_repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "oci_repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/dockerhub/token-not-used.md b/docs/configuration/initiatives/rules/dockerhub/token-not-used.md index c1f4fc78..cf615e4b 100644 --- a/docs/configuration/initiatives/rules/dockerhub/token-not-used.md +++ b/docs/configuration/initiatives/rules/dockerhub/token-not-used.md @@ -18,8 +18,11 @@ This rule requires Dockerhub Project Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -40,21 +43,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | dockerhub | | asset_type | oci_repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "oci_repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/generic/3rd-pty.md b/docs/configuration/initiatives/rules/generic/3rd-pty.md index dae9187a..11aff7bb 100644 --- a/docs/configuration/initiatives/rules/generic/3rd-pty.md +++ b/docs/configuration/initiatives/rules/generic/3rd-pty.md @@ -18,7 +18,7 @@ This rule requires Generic Statement. See [here](/docs/valint/generic) for more Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/generic/artifact-signed.md b/docs/configuration/initiatives/rules/generic/artifact-signed.md index 7ef7ee9a..ed8bc3d1 100644 --- a/docs/configuration/initiatives/rules/generic/artifact-signed.md +++ b/docs/configuration/initiatives/rules/generic/artifact-signed.md @@ -21,7 +21,7 @@ This rule requires Signed Generic Statement. See [here](/docs/valint/generic) fo Signed Evidence for this rule **IS** required by default. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/generic/evidence-exists.md b/docs/configuration/initiatives/rules/generic/evidence-exists.md index d99c5002..a8f912fd 100644 --- a/docs/configuration/initiatives/rules/generic/evidence-exists.md +++ b/docs/configuration/initiatives/rules/generic/evidence-exists.md @@ -21,7 +21,7 @@ This rule requires Generic Statement. See [here](/docs/valint/generic) for more Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/generic/k8s-jailbreak.md b/docs/configuration/initiatives/rules/generic/k8s-jailbreak.md index 547b25e7..b506f824 100644 --- a/docs/configuration/initiatives/rules/generic/k8s-jailbreak.md +++ b/docs/configuration/initiatives/rules/generic/k8s-jailbreak.md @@ -18,7 +18,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/generic/trivy-exists.md b/docs/configuration/initiatives/rules/generic/trivy-exists.md index b2e2d6c9..f953f780 100644 --- a/docs/configuration/initiatives/rules/generic/trivy-exists.md +++ b/docs/configuration/initiatives/rules/generic/trivy-exists.md @@ -17,7 +17,7 @@ This rule requires Generic Statement. See [here](/docs/valint/generic) for more Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/git/artifact-signed.md b/docs/configuration/initiatives/rules/git/artifact-signed.md index 5c9cf9a2..553cbd95 100644 --- a/docs/configuration/initiatives/rules/git/artifact-signed.md +++ b/docs/configuration/initiatives/rules/git/artifact-signed.md @@ -21,7 +21,7 @@ This rule requires Signed Git SBOM. See [here](/docs/valint/sbom) for more detai Signed Evidence for this rule **IS** required by default. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/git/coding-permissions.md b/docs/configuration/initiatives/rules/git/coding-permissions.md index f496ded2..d1400ffc 100644 --- a/docs/configuration/initiatives/rules/git/coding-permissions.md +++ b/docs/configuration/initiatives/rules/git/coding-permissions.md @@ -18,7 +18,7 @@ This rule requires Git SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/git/evidence-exists.md b/docs/configuration/initiatives/rules/git/evidence-exists.md index 237304dc..fe831a56 100644 --- a/docs/configuration/initiatives/rules/git/evidence-exists.md +++ b/docs/configuration/initiatives/rules/git/evidence-exists.md @@ -21,7 +21,7 @@ This rule requires Git SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/git/no-commit-to-main.md b/docs/configuration/initiatives/rules/git/no-commit-to-main.md index bfc24c3e..4437062e 100644 --- a/docs/configuration/initiatives/rules/git/no-commit-to-main.md +++ b/docs/configuration/initiatives/rules/git/no-commit-to-main.md @@ -18,7 +18,7 @@ This rule requires Git SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/git/no-unsigned-commits.md b/docs/configuration/initiatives/rules/git/no-unsigned-commits.md index 4d015322..d4aea5e1 100644 --- a/docs/configuration/initiatives/rules/git/no-unsigned-commits.md +++ b/docs/configuration/initiatives/rules/git/no-unsigned-commits.md @@ -18,7 +18,7 @@ This rule requires Git SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/github/org/2fa.md b/docs/configuration/initiatives/rules/github/org/2fa.md index f0d31dc8..3b11355e 100644 --- a/docs/configuration/initiatives/rules/github/org/2fa.md +++ b/docs/configuration/initiatives/rules/github/org/2fa.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ layer of security against unauthorized access. ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Rule Parameters (`with`) | Parameter | Default | diff --git a/docs/configuration/initiatives/rules/github/org/advanced-security.md b/docs/configuration/initiatives/rules/github/org/advanced-security.md index 53006081..d6230a76 100644 --- a/docs/configuration/initiatives/rules/github/org/advanced-security.md +++ b/docs/configuration/initiatives/rules/github/org/advanced-security.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ introducing vulnerabilities or unapproved software. ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/allow-admins.md b/docs/configuration/initiatives/rules/github/org/allow-admins.md index c9d26691..a3a0a355 100644 --- a/docs/configuration/initiatives/rules/github/org/allow-admins.md +++ b/docs/configuration/initiatives/rules/github/org/allow-admins.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -50,23 +53,13 @@ the desired value, a violation is recorded. This ensures that only users in the ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/allow-users.md b/docs/configuration/initiatives/rules/github/org/allow-users.md index 43de8411..db15a275 100644 --- a/docs/configuration/initiatives/rules/github/org/allow-users.md +++ b/docs/configuration/initiatives/rules/github/org/allow-users.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/create-private-repos.md b/docs/configuration/initiatives/rules/github/org/create-private-repos.md index 9e612778..2b25035b 100644 --- a/docs/configuration/initiatives/rules/github/org/create-private-repos.md +++ b/docs/configuration/initiatives/rules/github/org/create-private-repos.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -50,23 +53,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/create-repos.md b/docs/configuration/initiatives/rules/github/org/create-repos.md index 60ae404d..9ab7f133 100644 --- a/docs/configuration/initiatives/rules/github/org/create-repos.md +++ b/docs/configuration/initiatives/rules/github/org/create-repos.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/dependabot-alerts.md b/docs/configuration/initiatives/rules/github/org/dependabot-alerts.md index c2bff600..9e6aa05d 100644 --- a/docs/configuration/initiatives/rules/github/org/dependabot-alerts.md +++ b/docs/configuration/initiatives/rules/github/org/dependabot-alerts.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/dependabot-security-updates-sa.md b/docs/configuration/initiatives/rules/github/org/dependabot-security-updates-sa.md index 4991eebc..cb813f9a 100644 --- a/docs/configuration/initiatives/rules/github/org/dependabot-security-updates-sa.md +++ b/docs/configuration/initiatives/rules/github/org/dependabot-security-updates-sa.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/org/dependabot-security-updates.md b/docs/configuration/initiatives/rules/github/org/dependabot-security-updates.md index 6f6e15e5..f29068a4 100644 --- a/docs/configuration/initiatives/rules/github/org/dependabot-security-updates.md +++ b/docs/configuration/initiatives/rules/github/org/dependabot-security-updates.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/dependency-graph.md b/docs/configuration/initiatives/rules/github/org/dependency-graph.md index e2e5b464..d3ed39cf 100644 --- a/docs/configuration/initiatives/rules/github/org/dependency-graph.md +++ b/docs/configuration/initiatives/rules/github/org/dependency-graph.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/evidence-exists.md b/docs/configuration/initiatives/rules/github/org/evidence-exists.md index 7b30d448..10ae35b2 100644 --- a/docs/configuration/initiatives/rules/github/org/evidence-exists.md +++ b/docs/configuration/initiatives/rules/github/org/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: github/org/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/org/max-admins.md b/docs/configuration/initiatives/rules/github/org/max-admins.md index 79cf0fea..7d16b130 100644 --- a/docs/configuration/initiatives/rules/github/org/max-admins.md +++ b/docs/configuration/initiatives/rules/github/org/max-admins.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/old-secrets.md b/docs/configuration/initiatives/rules/github/org/old-secrets.md index aeabfa0e..9cecc618 100644 --- a/docs/configuration/initiatives/rules/github/org/old-secrets.md +++ b/docs/configuration/initiatives/rules/github/org/old-secrets.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/pp-custom-link.md b/docs/configuration/initiatives/rules/github/org/pp-custom-link.md index 8fa5c558..7fc2d128 100644 --- a/docs/configuration/initiatives/rules/github/org/pp-custom-link.md +++ b/docs/configuration/initiatives/rules/github/org/pp-custom-link.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -30,23 +33,13 @@ uses: github/org/pp-custom-link@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Rule Parameters (`with`) | Parameter | Default | diff --git a/docs/configuration/initiatives/rules/github/org/push-protection-sa.md b/docs/configuration/initiatives/rules/github/org/push-protection-sa.md index b34ac3b7..0c4c259a 100644 --- a/docs/configuration/initiatives/rules/github/org/push-protection-sa.md +++ b/docs/configuration/initiatives/rules/github/org/push-protection-sa.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/org/push-protection.md b/docs/configuration/initiatives/rules/github/org/push-protection.md index d65587c7..503b3ed7 100644 --- a/docs/configuration/initiatives/rules/github/org/push-protection.md +++ b/docs/configuration/initiatives/rules/github/org/push-protection.md @@ -19,8 +19,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/repo-visibility.md b/docs/configuration/initiatives/rules/github/org/repo-visibility.md index b506081c..21370972 100644 --- a/docs/configuration/initiatives/rules/github/org/repo-visibility.md +++ b/docs/configuration/initiatives/rules/github/org/repo-visibility.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/org/secret-scanning-sa.md b/docs/configuration/initiatives/rules/github/org/secret-scanning-sa.md index 79eca1c8..05dc9152 100644 --- a/docs/configuration/initiatives/rules/github/org/secret-scanning-sa.md +++ b/docs/configuration/initiatives/rules/github/org/secret-scanning-sa.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/org/secret-scanning.md b/docs/configuration/initiatives/rules/github/org/secret-scanning.md index 094c470e..85a0ef53 100644 --- a/docs/configuration/initiatives/rules/github/org/secret-scanning.md +++ b/docs/configuration/initiatives/rules/github/org/secret-scanning.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -30,23 +33,13 @@ uses: github/org/secret-scanning@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Rule Parameters (`with`) | Parameter | Default | diff --git a/docs/configuration/initiatives/rules/github/org/validity-checks-sa.md b/docs/configuration/initiatives/rules/github/org/validity-checks-sa.md index 846fee4c..7ebae0f0 100644 --- a/docs/configuration/initiatives/rules/github/org/validity-checks-sa.md +++ b/docs/configuration/initiatives/rules/github/org/validity-checks-sa.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/org/validity-checks.md b/docs/configuration/initiatives/rules/github/org/validity-checks.md index e0fe070b..294910bb 100644 --- a/docs/configuration/initiatives/rules/github/org/validity-checks.md +++ b/docs/configuration/initiatives/rules/github/org/validity-checks.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -30,23 +33,13 @@ uses: github/org/validity-checks@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Rule Parameters (`with`) | Parameter | Default | diff --git a/docs/configuration/initiatives/rules/github/org/web-commit-signoff.md b/docs/configuration/initiatives/rules/github/org/web-commit-signoff.md index cea1ae3a..223ba3c9 100644 --- a/docs/configuration/initiatives/rules/github/org/web-commit-signoff.md +++ b/docs/configuration/initiatives/rules/github/org/web-commit-signoff.md @@ -18,8 +18,11 @@ This rule requires Github Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/approvals-policy-check.md b/docs/configuration/initiatives/rules/github/repository/approvals-policy-check.md index 3abfdae6..f795cfdc 100644 --- a/docs/configuration/initiatives/rules/github/repository/approvals-policy-check.md +++ b/docs/configuration/initiatives/rules/github/repository/approvals-policy-check.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/repository/branch-protection.md b/docs/configuration/initiatives/rules/github/repository/branch-protection.md index eb800bc3..41f49c48 100644 --- a/docs/configuration/initiatives/rules/github/repository/branch-protection.md +++ b/docs/configuration/initiatives/rules/github/repository/branch-protection.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/repository/branch-verification.md b/docs/configuration/initiatives/rules/github/repository/branch-verification.md index 7ed9f8f8..60fc10a8 100644 --- a/docs/configuration/initiatives/rules/github/repository/branch-verification.md +++ b/docs/configuration/initiatives/rules/github/repository/branch-verification.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,23 +47,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Rule Parameters (`with`) | Parameter | Default | diff --git a/docs/configuration/initiatives/rules/github/repository/check-signed-commits.md b/docs/configuration/initiatives/rules/github/repository/check-signed-commits.md index 61e7eab5..d9fa706b 100644 --- a/docs/configuration/initiatives/rules/github/repository/check-signed-commits.md +++ b/docs/configuration/initiatives/rules/github/repository/check-signed-commits.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/default-branch-protection.md b/docs/configuration/initiatives/rules/github/repository/default-branch-protection.md index 82dcad2f..e69b35ea 100644 --- a/docs/configuration/initiatives/rules/github/repository/default-branch-protection.md +++ b/docs/configuration/initiatives/rules/github/repository/default-branch-protection.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/dependabot.md b/docs/configuration/initiatives/rules/github/repository/dependabot.md index 1075bc73..bb710a4d 100644 --- a/docs/configuration/initiatives/rules/github/repository/dependabot.md +++ b/docs/configuration/initiatives/rules/github/repository/dependabot.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/ephemeral-runners-only.md b/docs/configuration/initiatives/rules/github/repository/ephemeral-runners-only.md index 522165be..4bf0e336 100644 --- a/docs/configuration/initiatives/rules/github/repository/ephemeral-runners-only.md +++ b/docs/configuration/initiatives/rules/github/repository/ephemeral-runners-only.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/evidence-exists.md b/docs/configuration/initiatives/rules/github/repository/evidence-exists.md index 7ef28bd7..d215f95b 100644 --- a/docs/configuration/initiatives/rules/github/repository/evidence-exists.md +++ b/docs/configuration/initiatives/rules/github/repository/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: github/repository/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/no-cache-usage.md b/docs/configuration/initiatives/rules/github/repository/no-cache-usage.md index 1ad92ea1..5711d561 100644 --- a/docs/configuration/initiatives/rules/github/repository/no-cache-usage.md +++ b/docs/configuration/initiatives/rules/github/repository/no-cache-usage.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/no-org-secrets.md b/docs/configuration/initiatives/rules/github/repository/no-org-secrets.md index 49369483..8af497fc 100644 --- a/docs/configuration/initiatives/rules/github/repository/no-org-secrets.md +++ b/docs/configuration/initiatives/rules/github/repository/no-org-secrets.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/old-secrets.md b/docs/configuration/initiatives/rules/github/repository/old-secrets.md index 5004d337..3d08c036 100644 --- a/docs/configuration/initiatives/rules/github/repository/old-secrets.md +++ b/docs/configuration/initiatives/rules/github/repository/old-secrets.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,23 +47,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/repository/push-protection.md b/docs/configuration/initiatives/rules/github/repository/push-protection.md index c1421015..1c95f3c7 100644 --- a/docs/configuration/initiatives/rules/github/repository/push-protection.md +++ b/docs/configuration/initiatives/rules/github/repository/push-protection.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/repo-private.md b/docs/configuration/initiatives/rules/github/repository/repo-private.md index f18bdad1..220db88f 100644 --- a/docs/configuration/initiatives/rules/github/repository/repo-private.md +++ b/docs/configuration/initiatives/rules/github/repository/repo-private.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/secret-scanning.md b/docs/configuration/initiatives/rules/github/repository/secret-scanning.md index de375e7a..4a5dc991 100644 --- a/docs/configuration/initiatives/rules/github/repository/secret-scanning.md +++ b/docs/configuration/initiatives/rules/github/repository/secret-scanning.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/signed-commits.md b/docs/configuration/initiatives/rules/github/repository/signed-commits.md index 97eb14d1..4e9ebaa1 100644 --- a/docs/configuration/initiatives/rules/github/repository/signed-commits.md +++ b/docs/configuration/initiatives/rules/github/repository/signed-commits.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/validity-checks.md b/docs/configuration/initiatives/rules/github/repository/validity-checks.md index fbfb8e5d..55c77924 100644 --- a/docs/configuration/initiatives/rules/github/repository/validity-checks.md +++ b/docs/configuration/initiatives/rules/github/repository/validity-checks.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/visibility.md b/docs/configuration/initiatives/rules/github/repository/visibility.md index 17559b15..7726bdbe 100644 --- a/docs/configuration/initiatives/rules/github/repository/visibility.md +++ b/docs/configuration/initiatives/rules/github/repository/visibility.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/github/repository/web-commit-signoff.md b/docs/configuration/initiatives/rules/github/repository/web-commit-signoff.md index 87af8cb3..45e8e523 100644 --- a/docs/configuration/initiatives/rules/github/repository/web-commit-signoff.md +++ b/docs/configuration/initiatives/rules/github/repository/web-commit-signoff.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/github/repository/workflows-discovered.md b/docs/configuration/initiatives/rules/github/repository/workflows-discovered.md index 039abe02..40158e09 100644 --- a/docs/configuration/initiatives/rules/github/repository/workflows-discovered.md +++ b/docs/configuration/initiatives/rules/github/repository/workflows-discovered.md @@ -18,8 +18,11 @@ This rule requires Github Repository Discovery Evidence. See [here](/docs/platfo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -38,21 +41,11 @@ used for the repository scan. ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | github | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/org/allow-admins.md b/docs/configuration/initiatives/rules/gitlab/org/allow-admins.md index 154d3641..799616ea 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/allow-admins.md +++ b/docs/configuration/initiatives/rules/gitlab/org/allow-admins.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/allow-token-scopes.md b/docs/configuration/initiatives/rules/gitlab/org/allow-token-scopes.md index c782eca4..e6db8620 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/allow-token-scopes.md +++ b/docs/configuration/initiatives/rules/gitlab/org/allow-token-scopes.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/allow-users.md b/docs/configuration/initiatives/rules/gitlab/org/allow-users.md index abb2a2b7..b34a41cd 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/allow-users.md +++ b/docs/configuration/initiatives/rules/gitlab/org/allow-users.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/blocked-users.md b/docs/configuration/initiatives/rules/gitlab/org/blocked-users.md index 71115c20..ef069440 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/blocked-users.md +++ b/docs/configuration/initiatives/rules/gitlab/org/blocked-users.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/evidence-exists.md b/docs/configuration/initiatives/rules/gitlab/org/evidence-exists.md index 4b53765a..3f9b5d38 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/evidence-exists.md +++ b/docs/configuration/initiatives/rules/gitlab/org/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: gitlab/org/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/org/expiring-tokens.md b/docs/configuration/initiatives/rules/gitlab/org/expiring-tokens.md index 14af82b3..ad16b715 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/expiring-tokens.md +++ b/docs/configuration/initiatives/rules/gitlab/org/expiring-tokens.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/forbid-token-scopes.md b/docs/configuration/initiatives/rules/gitlab/org/forbid-token-scopes.md index e9dd8aa4..9ef9a900 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/forbid-token-scopes.md +++ b/docs/configuration/initiatives/rules/gitlab/org/forbid-token-scopes.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/inactive-projects.md b/docs/configuration/initiatives/rules/gitlab/org/inactive-projects.md index bee6ead9..3b4cd99f 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/inactive-projects.md +++ b/docs/configuration/initiatives/rules/gitlab/org/inactive-projects.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/longlive-tokens.md b/docs/configuration/initiatives/rules/gitlab/org/longlive-tokens.md index 14dc8d78..f8de1d08 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/longlive-tokens.md +++ b/docs/configuration/initiatives/rules/gitlab/org/longlive-tokens.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/max-admins.md b/docs/configuration/initiatives/rules/gitlab/org/max-admins.md index 45da1271..53e80801 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/max-admins.md +++ b/docs/configuration/initiatives/rules/gitlab/org/max-admins.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/projects-visibility.md b/docs/configuration/initiatives/rules/gitlab/org/projects-visibility.md index 906dd27e..f0f72170 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/projects-visibility.md +++ b/docs/configuration/initiatives/rules/gitlab/org/projects-visibility.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,23 +47,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/org/unused-tokens.md b/docs/configuration/initiatives/rules/gitlab/org/unused-tokens.md index 4a4d7d87..3181d92c 100644 --- a/docs/configuration/initiatives/rules/gitlab/org/unused-tokens.md +++ b/docs/configuration/initiatives/rules/gitlab/org/unused-tokens.md @@ -18,8 +18,11 @@ This rule requires Gitlab Organization Discovery Evidence. See [here](/docs/plat Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | organization | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "organization" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/abandoned-project.md b/docs/configuration/initiatives/rules/gitlab/project/abandoned-project.md index 924c0d2f..48e7c0f9 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/abandoned-project.md +++ b/docs/configuration/initiatives/rules/gitlab/project/abandoned-project.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/approvals-policy-check.md b/docs/configuration/initiatives/rules/gitlab/project/approvals-policy-check.md index 818d42f5..896b6330 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/approvals-policy-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/approvals-policy-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/approvers-per-merge-request.md b/docs/configuration/initiatives/rules/gitlab/project/approvers-per-merge-request.md index 84a7b403..9875d9ee 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/approvers-per-merge-request.md +++ b/docs/configuration/initiatives/rules/gitlab/project/approvers-per-merge-request.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/author-email-regex.md b/docs/configuration/initiatives/rules/gitlab/project/author-email-regex.md index 5c9f8678..0225bb0c 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/author-email-regex.md +++ b/docs/configuration/initiatives/rules/gitlab/project/author-email-regex.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/check-cwe.md b/docs/configuration/initiatives/rules/gitlab/project/check-cwe.md index 954bd3e7..e6060793 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/check-cwe.md +++ b/docs/configuration/initiatives/rules/gitlab/project/check-cwe.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/check-signed-commits.md b/docs/configuration/initiatives/rules/gitlab/project/check-signed-commits.md index f4b2e2e6..6c9d84c4 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/check-signed-commits.md +++ b/docs/configuration/initiatives/rules/gitlab/project/check-signed-commits.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/co-approval-required.md b/docs/configuration/initiatives/rules/gitlab/project/co-approval-required.md index 277a2c31..72282db1 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/co-approval-required.md +++ b/docs/configuration/initiatives/rules/gitlab/project/co-approval-required.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/commit-author-email-check.md b/docs/configuration/initiatives/rules/gitlab/project/commit-author-email-check.md index 50c2f8d9..cc2c65e5 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/commit-author-email-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/commit-author-email-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/commit-author-name-check.md b/docs/configuration/initiatives/rules/gitlab/project/commit-author-name-check.md index 8c0dc93e..bdc9fa38 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/commit-author-name-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/commit-author-name-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/commit-committer-check.md b/docs/configuration/initiatives/rules/gitlab/project/commit-committer-check.md index 125f21f6..6453ab7a 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/commit-committer-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/commit-committer-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/commit-message-check.md b/docs/configuration/initiatives/rules/gitlab/project/commit-message-check.md index 1b067e66..f1d8a83b 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/commit-message-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/commit-message-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/commits-validated.md b/docs/configuration/initiatives/rules/gitlab/project/commits-validated.md index 891b9181..93e45dfe 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/commits-validated.md +++ b/docs/configuration/initiatives/rules/gitlab/project/commits-validated.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/committer-email-check.md b/docs/configuration/initiatives/rules/gitlab/project/committer-email-check.md index f0859de3..3331f897 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/committer-email-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/committer-email-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/committer-name-check.md b/docs/configuration/initiatives/rules/gitlab/project/committer-name-check.md index 6fc523c9..d0af8f9f 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/committer-name-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/committer-name-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/critical-severity-limit.md b/docs/configuration/initiatives/rules/gitlab/project/critical-severity-limit.md index c32acf38..4a4e6d32 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/critical-severity-limit.md +++ b/docs/configuration/initiatives/rules/gitlab/project/critical-severity-limit.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/description-substring-check.md b/docs/configuration/initiatives/rules/gitlab/project/description-substring-check.md index 400720f2..59127967 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/description-substring-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/description-substring-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/disallowed-banned-approvers.md b/docs/configuration/initiatives/rules/gitlab/project/disallowed-banned-approvers.md index 71556dfd..c2f2e46b 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/disallowed-banned-approvers.md +++ b/docs/configuration/initiatives/rules/gitlab/project/disallowed-banned-approvers.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/evidence-exists.md b/docs/configuration/initiatives/rules/gitlab/project/evidence-exists.md index 12a04085..ca8ca7e8 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/evidence-exists.md +++ b/docs/configuration/initiatives/rules/gitlab/project/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: gitlab/project/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/force-push-protection.md b/docs/configuration/initiatives/rules/gitlab/project/force-push-protection.md index 142c1ee0..77d25674 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/force-push-protection.md +++ b/docs/configuration/initiatives/rules/gitlab/project/force-push-protection.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/medium-severity-limit.md b/docs/configuration/initiatives/rules/gitlab/project/medium-severity-limit.md index 02f60bac..d0d916fc 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/medium-severity-limit.md +++ b/docs/configuration/initiatives/rules/gitlab/project/medium-severity-limit.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/member-check.md b/docs/configuration/initiatives/rules/gitlab/project/member-check.md index ea95263c..9158cfa8 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/member-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/member-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/merge-access-level.md b/docs/configuration/initiatives/rules/gitlab/project/merge-access-level.md index 7ed4268d..ee390673 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/merge-access-level.md +++ b/docs/configuration/initiatives/rules/gitlab/project/merge-access-level.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/merge-requests-author-approval.md b/docs/configuration/initiatives/rules/gitlab/project/merge-requests-author-approval.md index 577ac928..63203589 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/merge-requests-author-approval.md +++ b/docs/configuration/initiatives/rules/gitlab/project/merge-requests-author-approval.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/merge-requests-disable-committers-approval.md b/docs/configuration/initiatives/rules/gitlab/project/merge-requests-disable-committers-approval.md index ec55db2c..11851a9e 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/merge-requests-disable-committers-approval.md +++ b/docs/configuration/initiatives/rules/gitlab/project/merge-requests-disable-committers-approval.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/message-substring-check.md b/docs/configuration/initiatives/rules/gitlab/project/message-substring-check.md index 5c3f317a..83844733 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/message-substring-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/message-substring-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/prevent-secrets-check.md b/docs/configuration/initiatives/rules/gitlab/project/prevent-secrets-check.md index ebdaeb6c..f1e17456 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/prevent-secrets-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/prevent-secrets-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/protect-ci-secrets.md b/docs/configuration/initiatives/rules/gitlab/project/protect-ci-secrets.md index 4f298be2..085678c6 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/protect-ci-secrets.md +++ b/docs/configuration/initiatives/rules/gitlab/project/protect-ci-secrets.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/push-access-level.md b/docs/configuration/initiatives/rules/gitlab/project/push-access-level.md index bf0bdcaa..dd2ee413 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/push-access-level.md +++ b/docs/configuration/initiatives/rules/gitlab/project/push-access-level.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/push-rules-set.md b/docs/configuration/initiatives/rules/gitlab/project/push-rules-set.md index 0e3353d6..b7a7aa81 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/push-rules-set.md +++ b/docs/configuration/initiatives/rules/gitlab/project/push-rules-set.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/reject-unsigned-commits.md b/docs/configuration/initiatives/rules/gitlab/project/reject-unsigned-commits.md index 9db5035c..28cfefbf 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/reject-unsigned-commits.md +++ b/docs/configuration/initiatives/rules/gitlab/project/reject-unsigned-commits.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/require-password-to-approve.md b/docs/configuration/initiatives/rules/gitlab/project/require-password-to-approve.md index 7265c67e..c113ff13 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/require-password-to-approve.md +++ b/docs/configuration/initiatives/rules/gitlab/project/require-password-to-approve.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/required-minimal-approvers.md b/docs/configuration/initiatives/rules/gitlab/project/required-minimal-approvers.md index c163f145..f200a67f 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/required-minimal-approvers.md +++ b/docs/configuration/initiatives/rules/gitlab/project/required-minimal-approvers.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/reset-pprovals-on-push.md b/docs/configuration/initiatives/rules/gitlab/project/reset-pprovals-on-push.md index c4adb397..bb035892 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/reset-pprovals-on-push.md +++ b/docs/configuration/initiatives/rules/gitlab/project/reset-pprovals-on-push.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/sast-scan-pass.md b/docs/configuration/initiatives/rules/gitlab/project/sast-scan-pass.md index bd3ac19f..60bae6a4 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/sast-scan-pass.md +++ b/docs/configuration/initiatives/rules/gitlab/project/sast-scan-pass.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/sast-scanning.md b/docs/configuration/initiatives/rules/gitlab/project/sast-scanning.md index 5a5ea427..c113aaf7 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/sast-scanning.md +++ b/docs/configuration/initiatives/rules/gitlab/project/sast-scanning.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/secrets-scan-pass.md b/docs/configuration/initiatives/rules/gitlab/project/secrets-scan-pass.md index a42d791c..60a93801 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/secrets-scan-pass.md +++ b/docs/configuration/initiatives/rules/gitlab/project/secrets-scan-pass.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/secrets-scanning.md b/docs/configuration/initiatives/rules/gitlab/project/secrets-scanning.md index 4ca5510f..f860197c 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/secrets-scanning.md +++ b/docs/configuration/initiatives/rules/gitlab/project/secrets-scanning.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/gitlab/project/selective-code-owner-removals.md b/docs/configuration/initiatives/rules/gitlab/project/selective-code-owner-removals.md index fb44a2fd..c171058b 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/selective-code-owner-removals.md +++ b/docs/configuration/initiatives/rules/gitlab/project/selective-code-owner-removals.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/gitlab/project/visibility-check.md b/docs/configuration/initiatives/rules/gitlab/project/visibility-check.md index c210c0a8..5f3ced74 100644 --- a/docs/configuration/initiatives/rules/gitlab/project/visibility-check.md +++ b/docs/configuration/initiatives/rules/gitlab/project/visibility-check.md @@ -18,8 +18,11 @@ This rule requires Gitlab Project Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,23 +49,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | gitlab | | asset_type | repo | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "project" "repo" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/images/allowed-base-image.md b/docs/configuration/initiatives/rules/images/allowed-base-image.md index 0d0eecb5..86c843d5 100644 --- a/docs/configuration/initiatives/rules/images/allowed-base-image.md +++ b/docs/configuration/initiatives/rules/images/allowed-base-image.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/allowed-image-source.md b/docs/configuration/initiatives/rules/images/allowed-image-source.md index f5154753..b74ddeb8 100644 --- a/docs/configuration/initiatives/rules/images/allowed-image-source.md +++ b/docs/configuration/initiatives/rules/images/allowed-image-source.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/allowed-npm-registries.md b/docs/configuration/initiatives/rules/images/allowed-npm-registries.md index bd102727..5d7b71a1 100644 --- a/docs/configuration/initiatives/rules/images/allowed-npm-registries.md +++ b/docs/configuration/initiatives/rules/images/allowed-npm-registries.md @@ -21,7 +21,7 @@ Components type reference: https://cyclonedx.org/docs/1.6/json/#components_items Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/images/banned-ports.md b/docs/configuration/initiatives/rules/images/banned-ports.md index dd37e855..546ec72d 100644 --- a/docs/configuration/initiatives/rules/images/banned-ports.md +++ b/docs/configuration/initiatives/rules/images/banned-ports.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/banned-users.md b/docs/configuration/initiatives/rules/images/banned-users.md index 929c02df..568240fd 100644 --- a/docs/configuration/initiatives/rules/images/banned-users.md +++ b/docs/configuration/initiatives/rules/images/banned-users.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/blocklist-build-scripts.md b/docs/configuration/initiatives/rules/images/blocklist-build-scripts.md index 4a13058e..a03509b7 100644 --- a/docs/configuration/initiatives/rules/images/blocklist-build-scripts.md +++ b/docs/configuration/initiatives/rules/images/blocklist-build-scripts.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/enforce-https-registry.md b/docs/configuration/initiatives/rules/images/enforce-https-registry.md index 6694658b..1d68592f 100644 --- a/docs/configuration/initiatives/rules/images/enforce-https-registry.md +++ b/docs/configuration/initiatives/rules/images/enforce-https-registry.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/images/forbid-large-images.md b/docs/configuration/initiatives/rules/images/forbid-large-images.md index edcb6f09..54e778e0 100644 --- a/docs/configuration/initiatives/rules/images/forbid-large-images.md +++ b/docs/configuration/initiatives/rules/images/forbid-large-images.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/fresh-base-image.md b/docs/configuration/initiatives/rules/images/fresh-base-image.md index e270e786..d80e8a7a 100644 --- a/docs/configuration/initiatives/rules/images/fresh-base-image.md +++ b/docs/configuration/initiatives/rules/images/fresh-base-image.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/fresh-image.md b/docs/configuration/initiatives/rules/images/fresh-image.md index a6eab183..7c5555f2 100644 --- a/docs/configuration/initiatives/rules/images/fresh-image.md +++ b/docs/configuration/initiatives/rules/images/fresh-image.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/image-signed.md b/docs/configuration/initiatives/rules/images/image-signed.md index 7ecc8d57..c1c32200 100644 --- a/docs/configuration/initiatives/rules/images/image-signed.md +++ b/docs/configuration/initiatives/rules/images/image-signed.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/images/require-healthcheck.md b/docs/configuration/initiatives/rules/images/require-healthcheck.md index 02d073bf..1f1de387 100644 --- a/docs/configuration/initiatives/rules/images/require-healthcheck.md +++ b/docs/configuration/initiatives/rules/images/require-healthcheck.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/restrict-shell-entrypoint.md b/docs/configuration/initiatives/rules/images/restrict-shell-entrypoint.md index 809e5a2d..b423a62b 100644 --- a/docs/configuration/initiatives/rules/images/restrict-shell-entrypoint.md +++ b/docs/configuration/initiatives/rules/images/restrict-shell-entrypoint.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/verify-labels-exist.md b/docs/configuration/initiatives/rules/images/verify-labels-exist.md index fff779f4..326a2156 100644 --- a/docs/configuration/initiatives/rules/images/verify-labels-exist.md +++ b/docs/configuration/initiatives/rules/images/verify-labels-exist.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/images/verify-labels.md b/docs/configuration/initiatives/rules/images/verify-labels.md index af1fd5df..ff1494bd 100644 --- a/docs/configuration/initiatives/rules/images/verify-labels.md +++ b/docs/configuration/initiatives/rules/images/verify-labels.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by target and product. diff --git a/docs/configuration/initiatives/rules/jenkins/folder/evidence-exists.md b/docs/configuration/initiatives/rules/jenkins/folder/evidence-exists.md index 21ee0709..b637cf46 100644 --- a/docs/configuration/initiatives/rules/jenkins/folder/evidence-exists.md +++ b/docs/configuration/initiatives/rules/jenkins/folder/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Jenkins Folder Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: jenkins/folder/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | jenkins | | asset_type | folder | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "folder" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/jenkins/folder/exposed-credentials.md b/docs/configuration/initiatives/rules/jenkins/folder/exposed-credentials.md index 6c6a8771..5d2f1eee 100644 --- a/docs/configuration/initiatives/rules/jenkins/folder/exposed-credentials.md +++ b/docs/configuration/initiatives/rules/jenkins/folder/exposed-credentials.md @@ -18,8 +18,11 @@ This rule requires Jenkins Folder Discovery Evidence. See [here](/docs/platforms Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | jenkins | | asset_type | folder | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "folder" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/jenkins/instance/evidence-exists.md b/docs/configuration/initiatives/rules/jenkins/instance/evidence-exists.md index 5b757d3e..512a2907 100644 --- a/docs/configuration/initiatives/rules/jenkins/instance/evidence-exists.md +++ b/docs/configuration/initiatives/rules/jenkins/instance/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires Jenkins Instance Discovery Evidence. See [here](/docs/platfor Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: jenkins/instance/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | jenkins | | asset_type | instance | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "instance" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/jenkins/instance/inactive-users.md b/docs/configuration/initiatives/rules/jenkins/instance/inactive-users.md index ee665e5d..3369e71d 100644 --- a/docs/configuration/initiatives/rules/jenkins/instance/inactive-users.md +++ b/docs/configuration/initiatives/rules/jenkins/instance/inactive-users.md @@ -18,8 +18,11 @@ This rule requires Jenkins Instance Discovery Evidence. See [here](/docs/platfor Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -46,22 +49,12 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | jenkins | | asset_type | instance | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "instance" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/jenkins/instance/unused-users.md b/docs/configuration/initiatives/rules/jenkins/instance/unused-users.md index f4daabdd..2d1479e3 100644 --- a/docs/configuration/initiatives/rules/jenkins/instance/unused-users.md +++ b/docs/configuration/initiatives/rules/jenkins/instance/unused-users.md @@ -18,8 +18,11 @@ This rule requires Jenkins Instance Discovery Evidence. See [here](/docs/platfor Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,20 +47,10 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | jenkins | | asset_type | instance | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "instance" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/k8s/namespace/allowed-images.md b/docs/configuration/initiatives/rules/k8s/namespace/allowed-images.md index 31a3c2cb..44b28611 100644 --- a/docs/configuration/initiatives/rules/k8s/namespace/allowed-images.md +++ b/docs/configuration/initiatives/rules/k8s/namespace/allowed-images.md @@ -18,8 +18,11 @@ This rule requires K8s Namespace Discovery Evidence. See [here](/docs/platforms/ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | namespace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "namespace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/k8s/namespace/allowed-registries.md b/docs/configuration/initiatives/rules/k8s/namespace/allowed-registries.md index 85db15be..1ec6dbda 100644 --- a/docs/configuration/initiatives/rules/k8s/namespace/allowed-registries.md +++ b/docs/configuration/initiatives/rules/k8s/namespace/allowed-registries.md @@ -18,8 +18,11 @@ This rule requires K8s Namespace Discovery Evidence. See [here](/docs/platforms/ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -49,23 +52,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | namespace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "namespace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/k8s/namespace/evidence-exists.md b/docs/configuration/initiatives/rules/k8s/namespace/evidence-exists.md index 4eaa7c88..b67cfbc7 100644 --- a/docs/configuration/initiatives/rules/k8s/namespace/evidence-exists.md +++ b/docs/configuration/initiatives/rules/k8s/namespace/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires K8s Namespace Discovery Evidence. See [here](/docs/platforms/ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: k8s/namespace/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | namespace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "namespace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-duration.md b/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-duration.md index d865f5d1..3b819a3b 100644 --- a/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-duration.md +++ b/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-duration.md @@ -18,8 +18,11 @@ This rule requires K8s Namespace Discovery Evidence. See [here](/docs/platforms/ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | namespace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "namespace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-termination.md b/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-termination.md index 45bb6235..224211a4 100644 --- a/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-termination.md +++ b/docs/configuration/initiatives/rules/k8s/namespace/verify-namespace-termination.md @@ -18,8 +18,11 @@ This rule requires K8s Namespace Discovery Evidence. See [here](/docs/platforms/ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | namespace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "namespace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/k8s/namespace/white-listed-namespaces.md b/docs/configuration/initiatives/rules/k8s/namespace/white-listed-namespaces.md index d7127b61..23975910 100644 --- a/docs/configuration/initiatives/rules/k8s/namespace/white-listed-namespaces.md +++ b/docs/configuration/initiatives/rules/k8s/namespace/white-listed-namespaces.md @@ -18,8 +18,11 @@ This rule requires K8s Namespace Discovery Evidence. See [here](/docs/platforms/ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -48,23 +51,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | namespace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "namespace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/k8s/namespace/white-listed-pod.md b/docs/configuration/initiatives/rules/k8s/namespace/white-listed-pod.md index 31bfbbb4..795d3a6c 100644 --- a/docs/configuration/initiatives/rules/k8s/namespace/white-listed-pod.md +++ b/docs/configuration/initiatives/rules/k8s/namespace/white-listed-pod.md @@ -18,8 +18,11 @@ This rule requires K8s Namespace Discovery Evidence. See [here](/docs/platforms/ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -51,23 +54,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | namespace | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "namespace" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/k8s/pods/evidence-exists.md b/docs/configuration/initiatives/rules/k8s/pods/evidence-exists.md index b1bdce2b..a1ebf50c 100644 --- a/docs/configuration/initiatives/rules/k8s/pods/evidence-exists.md +++ b/docs/configuration/initiatives/rules/k8s/pods/evidence-exists.md @@ -21,8 +21,11 @@ This rule requires K8s Pod Discovery Evidence. See [here](/docs/platforms/discov Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -33,21 +36,11 @@ uses: k8s/pods/evidence-exists@v2 ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | pod | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "pod" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/k8s/pods/verify-pod-duration.md b/docs/configuration/initiatives/rules/k8s/pods/verify-pod-duration.md index cf3868df..df47d66d 100644 --- a/docs/configuration/initiatives/rules/k8s/pods/verify-pod-duration.md +++ b/docs/configuration/initiatives/rules/k8s/pods/verify-pod-duration.md @@ -18,8 +18,11 @@ This rule requires K8s Pod Discovery Evidence. See [here](/docs/platforms/discov Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -47,23 +50,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | pod | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "pod" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/k8s/pods/verify-pod-termination.md b/docs/configuration/initiatives/rules/k8s/pods/verify-pod-termination.md index e6c5a6fc..babdc745 100644 --- a/docs/configuration/initiatives/rules/k8s/pods/verify-pod-termination.md +++ b/docs/configuration/initiatives/rules/k8s/pods/verify-pod-termination.md @@ -18,8 +18,11 @@ This rule requires K8s Pod Discovery Evidence. See [here](/docs/platforms/discov Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -44,21 +47,11 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | pod | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "pod" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` diff --git a/docs/configuration/initiatives/rules/k8s/pods/white-listed-pod.md b/docs/configuration/initiatives/rules/k8s/pods/white-listed-pod.md index dbb41ebd..a1416e52 100644 --- a/docs/configuration/initiatives/rules/k8s/pods/white-listed-pod.md +++ b/docs/configuration/initiatives/rules/k8s/pods/white-listed-pod.md @@ -18,8 +18,11 @@ This rule requires K8s Pod Discovery Evidence. See [here](/docs/platforms/discov Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: +:::info +Rule is scoped by product and target. +::: ## Usage example @@ -51,23 +54,13 @@ It performs the following steps: ## Evidence Requirements | Field | Value | |-------|-------| +| filter-by | ['product', 'target'] | | signed | False | | content_body_type | generic | | target_type | data | | predicate_type | http://scribesecurity.com/evidence/discovery/v0.1 | | asset_platform | k8s | | asset_type | pod | -| asset_name | Template value (see below) | - -**Template Value** (see [here](/docs/valint/initiatives#template-arguments) for more details) - -``` -{{- if eq .Context.asset_type "pod" -}} -{{- on_target .Context.asset_name -}} -{{- else -}} -{{- on_target nil -}} -{{- end -}} -``` ## Input Definitions | Parameter | Type | Required | Description | Default | diff --git a/docs/configuration/initiatives/rules/sarif/artifact-signed.md b/docs/configuration/initiatives/rules/sarif/artifact-signed.md index bc19b5ab..4045bd60 100644 --- a/docs/configuration/initiatives/rules/sarif/artifact-signed.md +++ b/docs/configuration/initiatives/rules/sarif/artifact-signed.md @@ -21,7 +21,7 @@ This rule requires Signed SARIF Evidence. See [here](/docs/valint/sarif) for mor Signed Evidence for this rule **IS** required by default. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sarif/evidence-exists.md b/docs/configuration/initiatives/rules/sarif/evidence-exists.md index 42cd057e..0696c495 100644 --- a/docs/configuration/initiatives/rules/sarif/evidence-exists.md +++ b/docs/configuration/initiatives/rules/sarif/evidence-exists.md @@ -21,7 +21,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sarif/patcheck/updates-needed.md b/docs/configuration/initiatives/rules/sarif/patcheck/updates-needed.md index 73272dd3..1ab20f7c 100644 --- a/docs/configuration/initiatives/rules/sarif/patcheck/updates-needed.md +++ b/docs/configuration/initiatives/rules/sarif/patcheck/updates-needed.md @@ -18,7 +18,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sarif/report-iac-errors.md b/docs/configuration/initiatives/rules/sarif/report-iac-errors.md index db73395a..47337704 100644 --- a/docs/configuration/initiatives/rules/sarif/report-iac-errors.md +++ b/docs/configuration/initiatives/rules/sarif/report-iac-errors.md @@ -18,7 +18,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sarif/verify-attack-vector.md b/docs/configuration/initiatives/rules/sarif/verify-attack-vector.md index 22114029..e248ccfc 100644 --- a/docs/configuration/initiatives/rules/sarif/verify-attack-vector.md +++ b/docs/configuration/initiatives/rules/sarif/verify-attack-vector.md @@ -18,7 +18,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sarif/verify-sarif.md b/docs/configuration/initiatives/rules/sarif/verify-sarif.md index df41e1a3..bef09563 100644 --- a/docs/configuration/initiatives/rules/sarif/verify-sarif.md +++ b/docs/configuration/initiatives/rules/sarif/verify-sarif.md @@ -18,7 +18,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sarif/verify-semgrep-report.md b/docs/configuration/initiatives/rules/sarif/verify-semgrep-report.md index 780392bf..c48481ef 100644 --- a/docs/configuration/initiatives/rules/sarif/verify-semgrep-report.md +++ b/docs/configuration/initiatives/rules/sarif/verify-semgrep-report.md @@ -18,7 +18,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sarif/verify-tool-evidence.md b/docs/configuration/initiatives/rules/sarif/verify-tool-evidence.md index c9f4b8e3..8118c189 100644 --- a/docs/configuration/initiatives/rules/sarif/verify-tool-evidence.md +++ b/docs/configuration/initiatives/rules/sarif/verify-tool-evidence.md @@ -21,7 +21,7 @@ This rule requires SARIF Evidence. See [here](/docs/valint/sarif) for more detai Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sbom/NTIA-compliance.md b/docs/configuration/initiatives/rules/sbom/NTIA-compliance.md index 713bde05..ba5466b5 100644 --- a/docs/configuration/initiatives/rules/sbom/NTIA-compliance.md +++ b/docs/configuration/initiatives/rules/sbom/NTIA-compliance.md @@ -34,7 +34,7 @@ valint bom my_company/my_image:latest \ Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/allowed-components.md b/docs/configuration/initiatives/rules/sbom/allowed-components.md index 39c1a463..45768773 100644 --- a/docs/configuration/initiatives/rules/sbom/allowed-components.md +++ b/docs/configuration/initiatives/rules/sbom/allowed-components.md @@ -21,7 +21,7 @@ Components type reference: https://cyclonedx.org/docs/1.6/json/#components_items Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/artifact-signed.md b/docs/configuration/initiatives/rules/sbom/artifact-signed.md index afe91434..dfad33bf 100644 --- a/docs/configuration/initiatives/rules/sbom/artifact-signed.md +++ b/docs/configuration/initiatives/rules/sbom/artifact-signed.md @@ -21,7 +21,7 @@ This rule requires Signed SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS** required by default. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/banned-licenses.md b/docs/configuration/initiatives/rules/sbom/banned-licenses.md index c6d0f487..f4115920 100644 --- a/docs/configuration/initiatives/rules/sbom/banned-licenses.md +++ b/docs/configuration/initiatives/rules/sbom/banned-licenses.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/banned-users.md b/docs/configuration/initiatives/rules/sbom/banned-users.md index 589f7c1f..d65e1040 100644 --- a/docs/configuration/initiatives/rules/sbom/banned-users.md +++ b/docs/configuration/initiatives/rules/sbom/banned-users.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/sbom/blocklist-packages.md b/docs/configuration/initiatives/rules/sbom/blocklist-packages.md index 68340e1f..9ec0a3d1 100644 --- a/docs/configuration/initiatives/rules/sbom/blocklist-packages.md +++ b/docs/configuration/initiatives/rules/sbom/blocklist-packages.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/complete-licenses.md b/docs/configuration/initiatives/rules/sbom/complete-licenses.md index 092a58aa..2ca244e6 100644 --- a/docs/configuration/initiatives/rules/sbom/complete-licenses.md +++ b/docs/configuration/initiatives/rules/sbom/complete-licenses.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/evidence-exists.md b/docs/configuration/initiatives/rules/sbom/evidence-exists.md index 8575c67c..71869c13 100644 --- a/docs/configuration/initiatives/rules/sbom/evidence-exists.md +++ b/docs/configuration/initiatives/rules/sbom/evidence-exists.md @@ -21,7 +21,7 @@ This rule requires SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/fresh-sbom.md b/docs/configuration/initiatives/rules/sbom/fresh-sbom.md index e0b37a79..2ca07a79 100644 --- a/docs/configuration/initiatives/rules/sbom/fresh-sbom.md +++ b/docs/configuration/initiatives/rules/sbom/fresh-sbom.md @@ -18,7 +18,7 @@ This rule requires SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/require-sbom.md b/docs/configuration/initiatives/rules/sbom/require-sbom.md index 26af45b6..3f67575c 100644 --- a/docs/configuration/initiatives/rules/sbom/require-sbom.md +++ b/docs/configuration/initiatives/rules/sbom/require-sbom.md @@ -21,7 +21,7 @@ This rule requires SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/required-packages.md b/docs/configuration/initiatives/rules/sbom/required-packages.md index 9fc3461a..cd5825e7 100644 --- a/docs/configuration/initiatives/rules/sbom/required-packages.md +++ b/docs/configuration/initiatives/rules/sbom/required-packages.md @@ -18,7 +18,7 @@ This rule requires Image SBOM. See [here](/docs/valint/sbom) for more details. Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/sbom/verify-huggingface-license.md b/docs/configuration/initiatives/rules/sbom/verify-huggingface-license.md index bcf0fcdb..124ee174 100644 --- a/docs/configuration/initiatives/rules/sbom/verify-huggingface-license.md +++ b/docs/configuration/initiatives/rules/sbom/verify-huggingface-license.md @@ -21,7 +21,7 @@ Ensure that the SBOM includes all specified licenses to meet compliance requirem Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/slsa/banned-builder-deps.md b/docs/configuration/initiatives/rules/slsa/banned-builder-deps.md index 740abf35..3d781533 100644 --- a/docs/configuration/initiatives/rules/slsa/banned-builder-deps.md +++ b/docs/configuration/initiatives/rules/slsa/banned-builder-deps.md @@ -18,7 +18,7 @@ This rule requires SLSA Provenance. See [here](/docs/valint/help/valint_slsa) fo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/slsa/build-time.md b/docs/configuration/initiatives/rules/slsa/build-time.md index 15078ca5..6849ae7b 100644 --- a/docs/configuration/initiatives/rules/slsa/build-time.md +++ b/docs/configuration/initiatives/rules/slsa/build-time.md @@ -18,7 +18,7 @@ This rule requires SLSA Provenance. See [here](/docs/valint/help/valint_slsa) fo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/slsa/field-exists.md b/docs/configuration/initiatives/rules/slsa/field-exists.md index f8f51dd6..c7c4a855 100644 --- a/docs/configuration/initiatives/rules/slsa/field-exists.md +++ b/docs/configuration/initiatives/rules/slsa/field-exists.md @@ -18,7 +18,7 @@ This rule requires SLSA Provenance. See [here](/docs/valint/help/valint_slsa) fo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/slsa/l1-provenance-exists.md b/docs/configuration/initiatives/rules/slsa/l1-provenance-exists.md index c145190e..47a97795 100644 --- a/docs/configuration/initiatives/rules/slsa/l1-provenance-exists.md +++ b/docs/configuration/initiatives/rules/slsa/l1-provenance-exists.md @@ -22,7 +22,7 @@ This rule requires SLSA Provenance. See [here](/docs/valint/help/valint_slsa) fo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/slsa/l2-provenance-authenticated.md b/docs/configuration/initiatives/rules/slsa/l2-provenance-authenticated.md index b41e0375..74af2593 100644 --- a/docs/configuration/initiatives/rules/slsa/l2-provenance-authenticated.md +++ b/docs/configuration/initiatives/rules/slsa/l2-provenance-authenticated.md @@ -22,7 +22,7 @@ This rule requires Signed SLSA Provenance. See [here](/docs/valint/help/valint_s Signed Evidence for this rule **IS** required by default. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: :::info Rule is scoped by product and target. diff --git a/docs/configuration/initiatives/rules/slsa/verify-byproducts.md b/docs/configuration/initiatives/rules/slsa/verify-byproducts.md index 4e8cb712..774cd7da 100644 --- a/docs/configuration/initiatives/rules/slsa/verify-byproducts.md +++ b/docs/configuration/initiatives/rules/slsa/verify-byproducts.md @@ -18,7 +18,7 @@ This rule requires SLSA Provenance. See [here](/docs/valint/help/valint_slsa) fo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/slsa/verify-custom-fields.md b/docs/configuration/initiatives/rules/slsa/verify-custom-fields.md index 1c6b4f81..e2014e85 100644 --- a/docs/configuration/initiatives/rules/slsa/verify-custom-fields.md +++ b/docs/configuration/initiatives/rules/slsa/verify-custom-fields.md @@ -18,7 +18,7 @@ This rule requires SLSA Provenance. See [here](/docs/valint/help/valint_slsa) fo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example diff --git a/docs/configuration/initiatives/rules/slsa/verify-external-parameters.md b/docs/configuration/initiatives/rules/slsa/verify-external-parameters.md index afe76add..faf15163 100644 --- a/docs/configuration/initiatives/rules/slsa/verify-external-parameters.md +++ b/docs/configuration/initiatives/rules/slsa/verify-external-parameters.md @@ -18,7 +18,7 @@ This rule requires SLSA Provenance. See [here](/docs/valint/help/valint_slsa) fo Signed Evidence for this rule **IS NOT** required by default but is recommended. ::: :::warning -Rule requires evaluation with a target. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. +Rule requires evaluation with a target or an asset input. Without one, it will be **disabled** unless the `--all-evidence` flag is provided. ::: ## Usage example