LabelRelease returns the IFC label for repository releases (list_releases, get_latest_release, get_release_by_tag). Integrity is trusted: releases are published by collaborators with push access, not by arbitrary outsiders. Confidentiality is public only when the repository is public AND no return
(isPrivate bool, hasDraft bool)
| 184 | // result containing one must be private. hasDraft reflects whether any release |
| 185 | // in the result is a draft; private repositories are always private regardless. |
| 186 | func LabelRelease(isPrivate bool, hasDraft bool) SecurityLabel { |
| 187 | if isPrivate || hasDraft { |
| 188 | return PrivateTrusted() |
| 189 | } |
| 190 | return PublicTrusted() |
| 191 | } |
| 192 | |
| 193 | // LabelCollaboratorRoster returns the IFC label for a repository's collaborator |
| 194 | // list (list_repository_collaborators). |