Policy as code
Security & software supply chain
Policy as code
Policy as code makes rules executable and reviewable, with tools such as Open Policy Agent or Kyverno. Test allowed and denied cases before you apply a gate.
Resources
Links marked “Amazon affiliate link” open an Amazon product page. As an Amazon Associate I earn from qualifying purchases. About affiliate links
Open Policy Agent documentationDocumentation · CNCF OPA project · opens in a new tabKyverno documentationDocumentation · CNCF Kyverno project · opens in a new tabCloud CustodianDocumentation · CNCF Cloud Custodian project · opens in a new tabDevOps guides (in French)Blog · Stéphane Robert · opens in a new tabOWASP Cheat Sheet SeriesReference · OWASP · opens in a new tabAlice and Bob Learn Application SecurityBook · Tanya Janca · Amazon affiliate link, opens Amazon in a new tabSecuring DevOpsBook · Julien Vehent · Amazon affiliate link, opens Amazon in a new tabDeveloping Secure Software (LFD121)Course · OpenSSF, The Linux Foundation · opens in a new tab