Update OPA and Regal to their latest versions

This commit is contained in:
Quentin Gliech
2025-02-18 11:48:44 +01:00
parent 993342ef58
commit 430eed25dd
3 changed files with 6 additions and 11 deletions

View File

@@ -7,7 +7,7 @@ runs:
- name: Install Open Policy Agent
uses: open-policy-agent/setup-opa@v2.2.0
with:
version: 0.70.0
version: 1.1.0
- name: Build the policies
run: make

View File

@@ -1,8 +1,8 @@
# Set to 1 to run OPA through Docker
DOCKER := 0
PODMAN := 0
OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:0.70.0-debug
REGAL_DOCKER_IMAGE := ghcr.io/styrainc/regal:0.29.2
OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:1.1.0-debug
REGAL_DOCKER_IMAGE := ghcr.io/styrainc/regal:0.31.0
INPUTS := \
common/common.rego \

View File

@@ -18,8 +18,7 @@ parse_uri(url) := obj if {
obj := {"scheme": matches[1], "authority": matches[2], "host": matches[3], "port": matches[4], "path": matches[5]}
}
secure_url(x) if {
x
secure_url(_) if {
data.client_registration.allow_insecure_uris
}
@@ -37,16 +36,12 @@ secure_url(x) if {
url.port == ""
}
host_matches_client_uri(x) if {
x
host_matches_client_uri(_) if {
# Do not check we allow host mismatch
data.client_registration.allow_host_mismatch
}
host_matches_client_uri(x) if {
x
host_matches_client_uri(_) if {
# Do not check if the client_uri is missing and we allow that
data.client_registration.allow_missing_client_uri
not data.client_metadata.client_uri