fix: policy behavior when no data capture

[gusfcarvalho]

No description provided.

[Copilot]

Pull request overview

Adjusts GitHub organization policies to treat missing/undisclosed telemetry as “skipped” rather than incorrectly failing (e.g., when data capture is disabled or the token lacks permissions), by introducing skip_reason outputs and refining null/missing input handling.

Changes:

• Add skip_reason to SSO and IP allow-list policies when relevant input data is unavailable.
• Change input defaults from empty object/list to null to distinguish “missing telemetry” from “misconfigured setting”.
• Update/add policy tests to validate skip behavior for IP allow-list and expose skip reason for SSO.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.

File	Description
policies/gh_org_sso_enabled.rego	Introduces skip_reason when sso data is unavailable, but currently leaves violation evaluation unguarded.
policies/gh_org_sso_enabled_test.rego	Adds a test asserting skip_reason for sso: null (but doesn’t assert expected violation behavior).
policies/gh_org_ip_allowlist_enabled.rego	Introduces skip_reason and prevents violations when ip_allow_list data is missing/null.
policies/gh_org_ip_allowlist_enabled_test.rego	Updates tests to ensure missing/null input yields no violations and produces the expected skip_reason.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.