From 79dca7c60a39e01ad4955f5d7d89089a8bd6b0e1 Mon Sep 17 00:00:00 2001 From: Zoran Regvart Date: Mon, 10 Jun 2024 15:24:40 +0200 Subject: [PATCH] Disallow binary dependencies in python packages cachi2 will set the `cachi2:pip:package:binary` property to `true` for the dependencies from pip that contain binaries within them. This in conjunction with [PR#1030][1] will not allow those. Reference: https://issues.redhat.com/browse/EC-638 [1] https://github.com/enterprise-contract/ec-policies/pull/1030 --- data/rule_data.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/data/rule_data.yml b/data/rule_data.yml index 9833501..bd417bc 100644 --- a/data/rule_data.yml +++ b/data/rule_data.yml @@ -161,6 +161,12 @@ rule_data: # https://github.com/hashicorp/vault-secrets-operator/blob/d462e563feeefbf10dc0637834f08e82e1d3f0c1/LICENSE#L7 min: v0.2.0 + # No binary python deps + # https://enterprisecontract.dev/docs/ec-policies/release_policy.html#sbom_cyclonedx__disallowed_package_attributes + disallowed_attributes: + - name: cachi2:pip:package:binary + value: "true" + # No releases on Fridays and weekends # https://enterprisecontract.dev/docs/ec-policies/release_policy.html#schedule__weekday_restriction disallowed_weekdays: