Function loadPolicyConfig

cmd/validate/vsa.go:397–422

loadPolicyConfig loads the policy configuration from multiple sources

(ctx context.Context, data *validateVSAData)

// loadPolicyConfig loads the policy configuration from multiple sources
func loadPolicyConfig(ctx context.Context, data *validateVSAData) error {
	// Resolve policy configuration using the standard utility function
	policyConfiguration, err := validate_utils.GetPolicyConfig(ctx, data.policyConfig)
	if err != nil {
		return fmt.Errorf("failed to get policy configuration: %w", err)
	}

	// Use the standard policy processing like other validation commands
	policyOptions := policy.Options{
		EffectiveTime: data.effectiveTime,
		PolicyRef:     policyConfiguration, // Use the resolved policy configuration
		PublicKey:     data.publicKeyPath,  // Use the available publicKeyPath field
		// Note: RekorURL is not available in VSA command, will use default
	}

	// Process policy using the standard PreProcessPolicy function
	processedPolicy, _, err := policy.PreProcessPolicy(ctx, policyOptions)
	if err != nil {
		return fmt.Errorf("failed to process policy: %w", err)
	}

	// Store the policy spec for comparison
	data.policySpec = processedPolicy.Spec()

	return nil
}

// extractVSAIdentifier extracts the VSA identifier from args or data
func extractVSAIdentifier(data *validateVSAData, args []string) string {