How-to: Validate Cross-Field Dependency (Rego)

inputs:
  mode:
    type: string
  threshold:
    type:
      - int
      - "null"

hints:
  - class: eoap:RegoPolicyHint
    module: |
      package workflow

      deny[msg] {
        input["mode"] == "strict"
        input["threshold"] == null
        msg := "threshold is required when mode is strict"
      }
    queries:
      - data.workflow.deny[_]

assertions-mate workflow.cwl --inputs inputs-valid.yaml