@@ -67,8 +67,8 @@ identity:
6767
6868sources :
6969 - policy :
70- - github.com/enterprise-contract/ec-policies //policy/lib
71- - github.com/enterprise-contract/ec-policies //policy/release
70+ - github.com/conforma/policy //policy/lib
71+ - github.com/conforma/policy //policy/release
7272 ruleData :
7373 allowed_gh_workflow_repos :
7474 - lcarva/festoji
@@ -86,7 +86,7 @@ configuration:
8686
8787This policy moves the certificate flags to the policy itself. It also specifies certain policy rules
8888to be executed. Here we are including some of the existing Enterprise Contract policy rules,
89- [github_certificate](https://conforma.dev/docs/ec-policies /release_policy.html#github_certificate_package).
89+ [github_certificate](https://conforma.dev/docs/policy /release_policy.html#github_certificate_package).
9090These policy rules rely on certain data to be provided, e.g. the expected GitHub Workflow
9191repository. With this policy saved as ` policy.yaml`, we can simplify how the CLI is invoked:
9292
@@ -189,7 +189,7 @@ deny contains result if {
189189This defines a single policy rule that verifies the materials section of the SLSA Provenance contain
190190the expected git repository. The Enterprise Contract relies on rego annotations to provide
191191additional information about each of the policy rules. See the
192- [docs](https://conforma.dev/docs/ec-policies /authoring.html) for more information.
192+ [docs](https://conforma.dev/docs/policy /authoring.html) for more information.
193193
194194Let's add this rule to our previous policy :
195195
@@ -202,8 +202,8 @@ identity:
202202
203203sources:
204204 - policy:
205- - github.com/enterprise-contract/ec-policies //policy/lib
206- - github.com/enterprise-contract/ec-policies //policy/release
205+ - github.com/conforma/policy //policy/lib
206+ - github.com/conforma/policy //policy/release
207207 ruleData:
208208 allowed_gh_workflow_repos:
209209 - lcarva/festoji
0 commit comments