OSVauco/tyr/policy/binauthz.yaml

19 lines
810 B
YAML

defaultAdmissionRule:
evaluationMode: REQUIRE_ATTESTATION
enforcementMode: ENFORCED_BLOCK_AND_AUDIT_LOG
requireAttestationsBy:
- projects/propane-will-491900-m5/attestors/tyr-kms-attestor
globalPolicyEvaluationMode: ENABLE
name: projects/propane-will-491900-m5/policy
attestationAuthorities:
"projects/propane-will-491900-m5/attestors/tyr-kms-attestor":
userOwnedGrafeasNote:
noteReference: "projects/propane-will-491900-m5/notes/cosign-attestor-note" # NOTE: This is a placeholder
publicKeys:
- pkixPublicKey:
publicKeyPem: |-
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEk7BUor5+RImB5EiI7imet3Xwm4vj
j0Fg0sXKY8icZfinWr3hwyGwSGmd/vq22OLjIhlhChTp10xXzKIVZyzQAA==
-----END PUBLIC KEY-----