Skip to content

Dependency proxy should support CEL rules instead of gitignore style rules #3104

Open

Description

@timbastin
No description provided.

Activity

  1. timbastin commented on Sep 29, 2026

    @timbastin
    MemberAuthor

    We need to make sure, that we are able to evaluate provenance data here as well. I know, that npm for example provides such information. We need to build up a json schema what we classify as "package". This "package" might contain a "package.maintainerChangedLast" property and "package.provenance.buildOn" whatever. Then we can express CEL rules against it: #1917

  2. linked a pull request that will close this issuefeat: Add CEL rules to dependency proxy #3180on Oct 12, 2026
  3. linked a pull request that will close this issuefeat: Add CEL rules to dependency proxy #971on Oct 12, 2026
  4. linked a pull request that will close this issuefeat: Add CEL rules to dependency proxy #346on Oct 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions