John Reese
John Reese
@Biswajee could you provide a small example of a Rego policy and the result you would expect to see when it succeeds? Theres been some discussion on this in the...
Thanks for the clarification, @Biswajee! We may need to provide the option to display filename and/or policy name. Showing the filename makes sense in this scenario, but other users may...
Oh sorry if I wasn't clear. I agree that showing the filename is a good thing to have. But we should also provide a way to include the rule name...
Not opposed to the idea of returning a non-zero error code based on coverage, but would lean more towards something along the lines of: ``` conftest verify ... --coverage=80 ```...
Yep! I saw it, just leaving a note that they split coverage and threshold into two different flags, rather than just a single one. At the moment, I don't have...
Is it just the verbose output? The end result should still be valid. I may be able to look at this again soon if it's causing that much pain, but...
Makes sense to me, would be a welcomed enhancement!
If I understand what you're trying to accomplish correctly, this should already be possible. When you create an exception, the body of that exception is what is matched on. e.g....
Awesome, thanks for the clarification. I see now. This feels like a duplicate of https://github.com/open-policy-agent/conftest/issues/453
@mykter I think this has to do with `22` not being in quotes. Once the quotes are added, the result fails: ```rego test_services_not_denied { deny["Cannot expose one of the following...