refactor: move Rego functions from Trivy

cmd/opa/main.go

@@ -7,7 +7,6 @@ import (
 	"github.com/open-policy-agent/opa/cmd"
 
 	"github.com/aquasecurity/trivy-checks/pkg/rego"
-	_ "github.com/aquasecurity/trivy/pkg/iac/rego" // register Built-in Functions from Trivy
 )
 
 func main() {

internal/rego/cidr.go

@@ -3,11 +3,12 @@ package rego
 import (
 	"fmt"
 
+	"github.com/open-policy-agent/opa/v1/ast"
+	"github.com/open-policy-agent/opa/v1/rego"
+	"github.com/open-policy-agent/opa/v1/topdown/builtins"
+	"github.com/open-policy-agent/opa/v1/types"
+
 	"github.com/aquasecurity/trivy-checks/internal/cidr"
-	"github.com/open-policy-agent/opa/ast"
-	"github.com/open-policy-agent/opa/rego"
-	"github.com/open-policy-agent/opa/topdown/builtins"
-	"github.com/open-policy-agent/opa/types"
 )
 
 var CidrCountAdressesDecl = &rego.Function{

internal/rego/parse_commands.go

@@ -5,10 +5,10 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/open-policy-agent/opa/ast"
-	"github.com/open-policy-agent/opa/rego"
-	"github.com/open-policy-agent/opa/topdown/builtins"
-	"github.com/open-policy-agent/opa/types"
+	"github.com/open-policy-agent/opa/v1/ast"
+	"github.com/open-policy-agent/opa/v1/rego"
+	"github.com/open-policy-agent/opa/v1/topdown/builtins"
+	"github.com/open-policy-agent/opa/v1/types"
 	"mvdan.cc/sh/v3/syntax"
 )
 

internal/rego/result.go

@@ -0,0 +1,104 @@
+package rego
+
+import (
+	"github.com/open-policy-agent/opa/v1/ast"
+	"github.com/open-policy-agent/opa/v1/rego"
+	"github.com/open-policy-agent/opa/v1/types"
+)
+
+var NewResultDecl = &rego.Function{
+	Name: "result.new",
+	Decl: types.NewFunction(types.Args(types.S, types.A), types.A),
+}
+
+func NewResultImpl(ctx rego.BuiltinContext, msg, cause *ast.Term) (*ast.Term, error) {
+	metadata := map[string]*ast.Term{
+		"startline":    ast.IntNumberTerm(0),
+		"endline":      ast.IntNumberTerm(0),
+		"sourceprefix": ast.StringTerm(""),
+		"filepath":     ast.StringTerm(""),
+		"explicit":     ast.BooleanTerm(false),
+		"managed":      ast.BooleanTerm(true),
+		"fskey":        ast.StringTerm(""),
+		"resource":     ast.StringTerm(""),
+		"parent":       ast.NullTerm(),
+	}
+	if msg != nil {
+		metadata["msg"] = msg
+	}
+
+	// universal
+	input := cause.Get(ast.StringTerm("__defsec_metadata"))
+	if input == nil {
+		// docker
+		input = cause
+	}
+	metadata = updateMetadata(metadata, input)
+
+	if term := input.Get(ast.StringTerm("parent")); term != nil {
+		var err error
+		metadata["parent"], err = NewResultImpl(ctx, nil, term)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	var values [][2]*ast.Term
+	for key, val := range metadata {
+		values = append(values, [2]*ast.Term{
+			ast.StringTerm(key),
+			val,
+		})
+	}
+	return ast.ObjectTerm(values...), nil
+}
+
+func updateMetadata(metadata map[string]*ast.Term, input *ast.Term) map[string]*ast.Term {
+	if term := input.Get(ast.StringTerm("startline")); term != nil {
+		metadata["startline"] = term
+	}
+	if term := input.Get(ast.StringTerm("StartLine")); term != nil {
+		metadata["startline"] = term
+	}
+	if term := input.Get(ast.StringTerm("endline")); term != nil {
+		metadata["endline"] = term
+	}
+	if term := input.Get(ast.StringTerm("EndLine")); term != nil {
+		metadata["endline"] = term
+	}
+	if term := input.Get(ast.StringTerm("filepath")); term != nil {
+		metadata["filepath"] = term
+	}
+	if term := input.Get(ast.StringTerm("sourceprefix")); term != nil {
+		metadata["sourceprefix"] = term
+	}
+	if term := input.Get(ast.StringTerm("Path")); term != nil {
+		metadata["filepath"] = term
+	}
+	if term := input.Get(ast.StringTerm("explicit")); term != nil {
+		metadata["explicit"] = term
+	}
+	if term := input.Get(ast.StringTerm("managed")); term != nil {
+		metadata["managed"] = term
+	}
+	if term := input.Get(ast.StringTerm("fskey")); term != nil {
+		metadata["fskey"] = term
+	}
+	if term := input.Get(ast.StringTerm("resource")); term != nil {
+		metadata["resource"] = term
+	}
+	return metadata
+}
+
+var IsManagedDecl = &rego.Function{
+	Name: "isManaged",
+	Decl: types.NewFunction(types.Args(types.A), types.B),
+}
+
+var IsManagedImpl = func(c rego.BuiltinContext, resource *ast.Term) (*ast.Term, error) {
+	metadata, err := NewResultImpl(c, ast.StringTerm(""), resource)
+	if err != nil {
+		return nil, err
+	}
+	return metadata.Get(ast.StringTerm("managed")), nil
+}

internal/rego/squealer.go

@@ -3,10 +3,10 @@ package rego
 import (
 	"fmt"
 
-	"github.com/open-policy-agent/opa/ast"
-	"github.com/open-policy-agent/opa/rego"
-	"github.com/open-policy-agent/opa/topdown/builtins"
-	"github.com/open-policy-agent/opa/types"
+	"github.com/open-policy-agent/opa/v1/ast"
+	"github.com/open-policy-agent/opa/v1/rego"
+	"github.com/open-policy-agent/opa/v1/topdown/builtins"
+	"github.com/open-policy-agent/opa/v1/types"
 	"github.com/owenrumney/squealer/pkg/squealer"
 )
 

pkg/rego/builtin.go

@@ -15,5 +15,7 @@ func RegisterBuiltins() {
 		opa.RegisterBuiltin1(rego.CidrCountAdressesDecl, rego.CidrCountAdressesImpl)
 		opa.RegisterBuiltin1(rego.CidrIsPublicDecl, rego.CidrIsPublicImpl)
 		opa.RegisterBuiltin1(rego.SquealerScanStringDecl, rego.SquealerScanStringImpl)
+		opa.RegisterBuiltin2(rego.NewResultDecl, rego.NewResultImpl)
+		opa.RegisterBuiltin1(rego.IsManagedDecl, rego.IsManagedImpl)
 	})
 }