30 lines
856 B
YAML
30 lines
856 B
YAML
{
|
|
"apiVersion": "hub.example.com/v1alpha1",
|
|
"kind": "Policy",
|
|
"metadata": {
|
|
"name": "038 ProjectBrain Analysis Operations",
|
|
"slug": "038-projectbrain-analysis-operations"
|
|
},
|
|
"spec": {
|
|
"priority": 38,
|
|
"description": "Allow only the bounded ProjectBrain analysis job mutations for clients that already hold an enabled inherited Gitea portfolio binding.",
|
|
"match": {
|
|
"project": "gitea-analysis",
|
|
"environmentClassifications": ["production"],
|
|
"connectors": ["projectbrain"],
|
|
"riskClasses": ["R2"],
|
|
"toolPatterns": [
|
|
"projectbrain.analysis.start",
|
|
"projectbrain.analysis.cancel"
|
|
]
|
|
},
|
|
"conditions": {
|
|
"requireEnabledClient": true,
|
|
"requireBinding": true,
|
|
"maxArgumentBytes": 65536
|
|
},
|
|
"decision": "allow_if_conditions",
|
|
"terminal": true
|
|
}
|
|
}
|