Send policy PR to policy repo

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@carabiner.dev>

Author: puerco

sourcetool/internal/cmd/setup.go

@@ -199,6 +199,9 @@ func (so *setupCtlOpts) Validate() error {
 	errs := []error{
 		so.setupOpts.Validate(),
 	}
+	if len(so.configs) == 0 {
+		errs = append(errs, fmt.Errorf("at least one config value must be set %v", sourcetool.ControlConfigurations))
+	}
 	for _, c := range so.configs {
 		if !slices.Contains(sourcetool.ControlConfigurations, models.ControlConfiguration(c)) {
 			errs = append(errs, fmt.Errorf("unknown configuration: %q", c))

sourcetool/pkg/repo/pullrequest.go

@@ -108,7 +108,7 @@ func (prm *PullRequestManager) PullRequestFileList(
 	}
 
 	if err := prm.impl.PushFeatureBranch(&prm.Options, clone); err != nil {
-		return nil, fmt.Errorf("pushing feature branch to remote")
+		return nil, fmt.Errorf("pushing feature branch to remote: %w", err)
 	}
 
 	// Use the base branch from the options, unless not set we use the default

sourcetool/pkg/sourcetool/implementation.go

@@ -105,12 +105,29 @@ func (impl *defaultToolImplementation) CreatePolicyPR(a *auth.Authenticator, opt
 
 	// Create a pull request manager
 	prManager := repo.NewPullRequestManager(repo.WithAuthenticator(a))
+	prManager.Options.UseFork = true
 
-	// TODO(puerco): Honor forks settings, etc
+	// Define the policy repo...
+	policyRepoOwner := policy.SourcePolicyRepoOwner
+	policyRepoName := policy.SourcePolicyRepo
+	// ... but honor if there is one in the options
+	if opts.PolicyRepo != "" {
+		var ok bool
+		policyRepoOwner, policyRepoName, ok = strings.Cut(opts.PolicyRepo, "/")
+		if !ok {
+			return nil, fmt.Errorf("invalid policy repository")
+		}
+	}
+
+	policyRepo := &models.Repository{
+		Hostname:      "github.com",
+		Path:          fmt.Sprintf("%s/%s", policyRepoOwner, policyRepoName),
+		DefaultBranch: "main",
+	}
 
 	// Open the pull request
 	pr, err := prManager.PullRequestFileList(
-		r,
+		policyRepo,
 		&roptions.PullRequestFileListOptions{
 			Title: fmt.Sprintf("Add %s/%s SLSA Source policy file", repoOwner, repoName),
 			Body:  fmt.Sprintf(`This pull request adds the SLSA source policy for github.com/%s/%s`, repoOwner, repoName),

sourcetool/pkg/sourcetool/tool.go

@@ -173,7 +173,7 @@ func (t *Tool) CheckPolicyRepoFork(repo *models.Repository) (bool, error) {
 
 // CreateBranchPolicy creates a repository policy
 func (t *Tool) CreateBranchPolicy(ctx context.Context, r *models.Repository, branches []*models.Branch) (*policy.RepoPolicy, error) {
-	if len(branches) > 0 {
+	if len(branches) > 1 {
 		// Chanfe this once we support merging policies
 		return nil, fmt.Errorf("only one branch is supported at a time")
 	}