feat: add skip field to policy group attachments (#2564)

Signed-off-by: Miguel Martinez <[email protected]>

Author: migmartri

app/cli/pkg/action/testdata/contract_v2.yaml

@@ -33,4 +33,8 @@ spec:
     attestation:
       - ref: file://attestation-policy.yaml
   policyGroups:
-    - ref: file://testdata/policy_group.yaml
+    - ref: sbom-quality
+      with:
+        user_name: "test-user"
+      skip:
+        - policy-to-skip

app/controlplane/api/gen/frontend/workflowcontract/v1/crafting_schema.ts

@@ -344,6 +344,8 @@ message PolicyGroupAttachment {
   string ref = 1 [(buf.validate.field).string.min_len = 1];
   // group arguments
   map<string, string> with = 2;
+  // policy names to skip (matched against metadata.name)
+  repeated string skip = 3;
 }
 
 // Represents a group or policies

app/controlplane/api/gen/jsonschema/workflowcontract.v1.PolicyGroupAttachment.jsonschema.json

@@ -98,10 +98,10 @@ prometheus_integration:
   - org_name: "development"
 
 # Policy providers configuration
-policy_providers:
-  - name: chainloop
-    default: true
-    url: http://localhost:8002/v1
+# policy_providers:
+#   - name: chainloop
+#     default: true
+#     url: http://localhost:8002/v1
 
 enable_profiler: true
 # federated_authentication:

app/controlplane/api/gen/jsonschema/workflowcontract.v1.PolicyGroupAttachment.schema.json

@@ -0,0 +1,14 @@
+apiVersion: chainloop.dev/v1
+kind: Contract
+metadata:
+  name: contract-with-empty-skip
+  description: Test contract with empty skip list
+spec:
+  materials:
+    - name: my-sbom
+      type: SBOM_CYCLONEDX_JSON
+  runner:
+    type: GITHUB_ACTION
+  policyGroups:
+    - ref: file://../testdata/policy_group_with_embedded.yaml
+      skip: []

app/controlplane/api/workflowcontract/v1/crafting_schema.pb.go

@@ -0,0 +1,15 @@
+apiVersion: chainloop.dev/v1
+kind: Contract
+metadata:
+  name: contract-with-valid-skip
+  description: Test contract with valid policy skip list
+spec:
+  materials:
+    - name: my-sbom
+      type: SBOM_CYCLONEDX_JSON
+  runner:
+    type: GITHUB_ACTION
+  policyGroups:
+    - ref: file://../testdata/policy_group_with_embedded.yaml
+      skip:
+        - sbom-version-policy