{{- define "template.enforce-policy" }}
- name: enforce-policy
      inputs:
        parameters:
          - name: fail-on-cvss
      container:
        image: agentguard-tools:latest
        command:
          - node
          - /app/dist/enforce-policy.js
        env:
          - name: FAIL_ON_CVSS
            value: "{{inputs.parameters.fail-on-cvss}}"
      volumeMounts:
        - name: workspace
          mountPath: /workspace
{{- end }}