Custom Policy

[ctit-cl]

TL;DR

modify the repository.rego file, commenting or removing some line to disable some rule.

Error at run time

Expected behavior

see if we can deactivate some rules according to team policies

Observed behavior

No response

Version

0.2.7

On which operating system are you using legitify?

Linux

Relevant log output

Error: compiler: 11 errors occurred:
../gitlab/repository.rego:11: rego_type_error: multiple default rules data.repository.project_not_maintained found
../gitlab/repository.rego:150: rego_type_error: multiple default rules data.repository.no_conversation_resolution found
../gitlab/repository.rego:180: rego_type_error: multiple default rules data.repository.code_review_not_required found
../gitlab/repository.rego:102: rego_type_error: multiple default rules data.repository.repository_require_code_owner_reviews_policy found
../gitlab/repository.rego:195: rego_type_error: multiple default rules data.repository.code_review_by_two_members_not_required found
../gitlab/repository.rego:240: rego_type_error: multiple default rules data.repository.repository_allows_committer_approvals_policy found
../gitlab/repository.rego:254: rego_type_error: multiple default rules data.repository.repository_dismiss_stale_reviews found
../gitlab/repository.rego:50: rego_type_error: multiple default rules data.repository.forking_allowed_for_repository found
../gitlab/repository.rego:121: rego_type_error: multiple default rules data.repository.project_webhook_doesnt_require_ssl found
../gitlab/repository.rego:210: rego_type_error: multiple default rules data.repository.repository_allows_review_requester_to_approve_their_own_request found
rego_compile_error: error limit reached

Additional information

No response

[noamd-legit]

Hi @ctit-cl,
Custom policies are only for adding new policies and not for removing existing ones.
I've created this feature request to support it.

Meanwhile, If you're willing to compile legitify from source I could guide you how to deactivate the unwanted policies

[ctit-cl]

@noamd-legit thanks for the help, can you help me to be able to disable the rules at build time?

[noamd-legit]

@ctit-cl I've just added support for specifying policies to ignore - #218

If you run from the main branch you can use the --ignore-policies-path PATH option to do that.

The ignore file needs to contain each policy name in a new line, e.g.

no_conversation_resolution
requires_status_checks   

Let me know how it works for you 😄