Capabilities returns a Capabilities that includes the the policy engine builtins.

NewBasePolicy constructs a new BasePolicy.

TODO support array values?.

FailedToEvaluateResource indicates that an error occurred while evaluating the judgement rule query for the policy for a particular resource.

FailedToEvaluateRule indicates that an error occurred while evaluating the judgement rule for the policy.

FailedToPrepareForEval indicates that an error occurred while preparing the judgement rule query for the policy.

FailedToProcessResults indicates that an error occurred while processing the results of the judgement rule query.

FailedToQueryMetadata indicates that an error occurred while querying the policy's metadata rule.

FailedToQueryResources indicates that an error occurred while querying the policy's resources rule.

RegoAPIProvider is a provider for the embedded 'snyk' and 'fugue' Rego APIs.

SupportedInputTypes contains all of the input types that this package officially supports.

BasePolicy implements functionality that is shared between different concrete Policy implementations.

ModuleSet is a set of Modules that all share the same package name.

MultiResourcePolicy represents a policy that takes multiple resources as input.

Helper for unique resource identifiers, meant to be used as key in a `map`.

ResourcesQuery describes a request for a specific resource type from the given scope.

ResourcesResult contains an indication of whether the Scope specified in the ResourcesQuery was found and a slice of resources.

SingleResourcePolicy represents a policy that takes a single resource as input.

SingleResourceProcessor can turn rego results into the results model we want.

Policy is an interface that supports all of the ways we want to interact with policies.

SingleResourceProcessor can turn rego results into the results model we want.

ProcessSingleResultSet functions extract RuleResult models from the ResultSet of multi-resource type rules.