3 Commits

Author	SHA1	Message	Date
Anders Eknert	e43ef0a979	Use any in place of interface{} (#7566) ... Earlier this evening I tried to run the Go [modernize](https://pkg.go.dev/golang.org/x/tools/gopls/internal/analysis/modernize) analyzer on OPA. That didn't go as planned: - https://github.com/golang/go/issues/73661 - https://github.com/golang/go/issues/73663 While we wait for that to be fixed, I figured an old-fashioned search-and-replace across the repo may work for at least the `interface{}` to `any` conversion. That should help make it easier to see the other fixes as applied by the modernize tool once it has had those issues resolved. Signed-off-by: Anders Eknert <anders@styra.com>	2025-05-12 13:57:48 +02:00
Jason Hall	4dd7fb1c0d	Remove use of github.com/pkg/errors (#4696) ... This package is deprecated, archived, and in maintenance mode, since Go errors support wrapping natively. For #2152. Signed-off-by: Jason Hall <jason@chainguard.dev>	2022-05-18 11:29:35 +02:00
Ashutosh Narkar	338583c18a	Add support for OPA bundle signatures ... These changes add support for digital signatures for policy bundles which can be used to verify their authenticity. Bundle signature verification involves the following steps: * Verify the JWT signature * Verify the files in the JWT payload exist in the bundle * Verify the file content of the files in bundle match with those in the payload This commit adds a new `sign` command to generate a digital signature for policy bundles. For more details, run "opa sign --help" The signatures generated by the 'sign' command can be verified by the 'build' command. The 'build' command can also sign the bundle it generates. The 'run' command can verify a signed bundle or skip verification altogether. OPA 'sign', 'build' and 'run' can be used to sign/verify bundles in bundle mode (--bundle) mode only. Verification can be also be performed when bundle downloading is enabled. Fixes: #1757 Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>	2020-07-14 09:49:59 -04:00