diff --git a/main/_playground/assets/data.json b/main/_playground/assets/data.json index 8214164d..e64af166 100644 --- a/main/_playground/assets/data.json +++ b/main/_playground/assets/data.json @@ -3,7 +3,7 @@ { "category": "Dockerfile", "name": "check-dockerfile", - "policy": "apiVersion: json.kyverno.io/v1alpha1\nkind: ValidatingPolicy\nmetadata:\n name: check-dockerfile\nspec:\n rules:\n - name: deny-external-calls\n assert:\n all:\n - message: HTTP calls are not allowed\n check:\n ~.(Stages[].Commands[].Args[].Value):\n (contains(@, 'https://') || contains(@, 'http://')): false\n - message: HTTP calls are not allowed\n check:\n ~.(Stages[].Commands[].CmdLine[]):\n (contains(@, 'https://') || contains(@, 'http://')): false\n - message: curl is not allowed\n check:\n ~.(Stages[].Commands[].CmdLine[]):\n (contains(@, 'curl')): false\n - message: wget is not allowed\n check:\n ~.(Stages[].Commands[].CmdLine[]):\n (contains(@, 'wget')): false", + "policy": "apiVersion: json.kyverno.io/v1alpha1\nkind: ValidatingPolicy\nmetadata:\n name: check-dockerfile\nspec:\n rules:\n - name: deny-external-calls\n assert:\n all:\n - message: HTTP calls are not allowed\n check:\n ~.(Stages[].Commands[].Args[].Value):\n (contains(@, 'https://') || contains(@, 'http://')): false\n - message: HTTP calls are not allowed\n check:\n ~.(Stages[].Commands[].CmdLine[]):\n (contains(@, 'https://') || contains(@, 'http://')): false\n - message: curl is not allowed\n check:\n ~.(Stages[].Commands[].CmdLine[]):\n (contains(@, 'curl')): false\n - message: wget is not allowed\n check:\n ~.(Stages[].Commands[].CmdLine[]):\n (contains(@, 'wget')): false\n", "payload": "MetaArgs:\n- DefaultValue: '\"linux/amd64\"'\n Key: BUILD_PLATFORM\n ProvidedValue: null\n Value: '\"linux/amd64\"'\n- DefaultValue: '\"golang:1.20.6-alpine3.18\"'\n Key: BUILDER_IMAGE\n ProvidedValue: null\n Value: '\"golang:1.20.6-alpine3.18\"'\nStages:\n- As: builder\n BaseName: '\"golang:1.20.6-alpine3.18\"'\n Commands:\n - Name: WORKDIR\n Path: /\n - Chmod: \"\"\n Chown: \"\"\n DestPath: ./\n From: \"\"\n Link: false\n Name: COPY\n SourceContents: null\n SourcePaths:\n - .\n - Args:\n - Comment: \"\"\n Key: SIGNER_BINARY_LINK\n Value: '\"https://d2hvyiie56hcat.cloudfront.net/linux/amd64/plugin/latest/notation-aws-signer-plugin.zip\"'\n Name: ARG\n - Args:\n - Comment: \"\"\n Key: SIGNER_BINARY_FILE\n Value: '\"notation-aws-signer-plugin.zip\"'\n Name: ARG\n - CmdLine:\n - wget -O ${SIGNER_BINARY_FILE} ${SIGNER_BINARY_LINK}\n Files: null\n FlagsUsed: []\n Name: RUN\n PrependShell: true\n - CmdLine:\n - apk update \u0026\u0026 apk add unzip \u0026\u0026 unzip -o ${SIGNER_BINARY_FILE}\n Files: null\n FlagsUsed: []\n Name: RUN\n PrependShell: true\n - CmdLine:\n - GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -ldflags=\"-w -s\" -o kyverno-notation-aws\n .\n Files: null\n FlagsUsed: []\n Name: RUN\n PrependShell: true\n Comment: \"\"\n From:\n Image: '\"golang:1.20.6-alpine3.18\"'\n Location:\n - End:\n Character: 0\n Line: 4\n Start:\n Character: 0\n Line: 4\n Name: builder\n Platform: $BUILD_PLATFORM\n SourceCode: FROM --platform=$BUILD_PLATFORM $BUILDER_IMAGE as builder\n- BaseName: gcr.io/distroless/static:nonroot\n Commands:\n - Name: WORKDIR\n Path: /\n - Env:\n - Key: PLUGINS_DIR\n Value: /plugins\n Name: ENV\n - Chmod: \"\"\n Chown: \"\"\n DestPath: plugins/com.amazonaws.signer.notation.plugin/notation-com.amazonaws.signer.notation.plugin\n From: builder\n Link: false\n Name: COPY\n SourceContents: null\n SourcePaths:\n - notation-com.amazonaws.signer.notation.plugin\n - Chmod: \"\"\n Chown: \"\"\n DestPath: kyverno-notation-aws\n From: builder\n Link: false\n Name: COPY\n SourceContents: null\n SourcePaths:\n - kyverno-notation-aws\n - CmdLine:\n - /kyverno-notation-aws\n Files: null\n Name: ENTRYPOINT\n PrependShell: false\n Comment: \"\"\n From:\n Image: gcr.io/distroless/static:nonroot\n Location:\n - End:\n Character: 0\n Line: 20\n Start:\n Character: 0\n Line: 20\n Name: \"\"\n Platform: \"\"\n SourceCode: FROM gcr.io/distroless/static:nonroot\n" }, { diff --git a/main/_playground/assets/main.wasm b/main/_playground/assets/main.wasm index e9e46b91..c9438d65 100644 Binary files a/main/_playground/assets/main.wasm and b/main/_playground/assets/main.wasm differ diff --git a/main/sitemap.xml b/main/sitemap.xml index 52338f80..323ce0e0 100644 --- a/main/sitemap.xml +++ b/main/sitemap.xml @@ -2,162 +2,162 @@ https://github.io/kyverno/kyverno-json/main/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/install/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/intro/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/jp/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/playground/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/quick-start/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/apis/kyverno-json.v1alpha1/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/dockerfile/dockerfile-deny-expose-22/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/dockerfile/dockerfile-deny-latest-image/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/dockerfile/dockerfile-disallow-apt/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/dockerfile/dockerfile-disallow-last-user-root/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/dockerfile/dockerfile-disallow-sudo/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/ecs/ecs-cluster-enable-logging/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/ecs/ecs-cluster-required-container-insights/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/ecs/ecs-service-public-ip/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/ecs/ecs-service-required-latest-platform-fargate/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/ecs/ecs-task-definition-fs-read-only/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/policies/ecs/policy-1/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_completion/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_completion_bash/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_completion_fish/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_completion_powershell/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_completion_zsh/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_docs/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_jp/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_jp_function/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_jp_parse/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_jp_query/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_playground/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_scan/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_serve/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/cli/commands/kyverno-json_version/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/go-library/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/jp/functions/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/policies/asserts/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/policies/policies/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/webapp/ - 2024-09-25 + 2024-09-26 https://github.io/kyverno/kyverno-json/main/catalog/ - 2024-09-25 + 2024-09-26 \ No newline at end of file diff --git a/main/sitemap.xml.gz b/main/sitemap.xml.gz index bada8e9f..15d2f07f 100644 Binary files a/main/sitemap.xml.gz and b/main/sitemap.xml.gz differ