Skip to content

Consolidate verification response between configPolicy and regoPolicy #1690

Open
@binbin-li

Description

What would you like to be added?

Currently we have 2 versions for verification response, 0.1.0 is used for configPolicy engine while 1.0.0 is for regoPolicy.
Since 2 versions are incompatible, we need to maintain both of them for configPolicy and regoPolicy engines. To reduce confusion from users, we need to take some actions:

  1. Clarify the user scenarios and comparison in document.
  2. Deprecate configPolicy or refactor the configPolicy engine to fix existing bugs. Fix Config Policy Provider for Nested References #351, feat: multiple signatures verification #737, Decouple nested references from verifiers #528
  3. Switch the response version adopted by configPolicy or regoPolicy in V2 so that all policy engines could evaluate the verifierReport.

Anything else you would like to add?

No response

Are you willing to submit PRs to contribute to this feature?

  • Yes, I am willing to implement it.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions