Function hasGatingViolation

app/cli/cmd/attestation_push.go:192–199

hasGatingViolation reports whether any of the supplied violations should count toward the policy gate. Entries flagged Suppress (typically because an assessment renders the finding NOT_AFFECTED) are excluded.

(violations []*action.PolicyViolation)

// count toward the policy gate. Entries flagged Suppress (typically because
// an assessment renders the finding NOT_AFFECTED) are excluded.
func hasGatingViolation(violations []*action.PolicyViolation) bool {
	for _, v := range violations {
		if !v.Suppress {
			return true
		}
	}
	return false
}

func validatePolicyEnforcement(status *action.AttestationStatusResult, bypassPolicyCheck bool) error {
	// Block if any of the policies has been configured as a gate. Entries